Principal Software Engineer, Platform Engineering

The Role

Joining Moderna offers the unique opportunity to be part of a pioneering team that's revolutionizing medicine through mRNA technology, with a diverse pipeline of development programs across various diseases.

• Design and build secureplatform capabilities using Python/Type Script, Git Hub Actions,Pulumi, Docker, AWS, and relevant internal or vendor APIs.
• Lead the design and evolution ofAI runtime safetyand AIgatewaypatterns,including policy enforcement,access controls,telemetry,auditability and operational controls.
• Build and guideimplementationofgoverned AI-assisted development workflows by packaging approved tools, creating reusable integration patterns, improving developer experience, and embedding security and compliance expectations into paved-road delivery workflows.
• Partner with Cybersecurity, Architecture, AI platform teams, and engineering leaders to align on platform standards, adoption strategy, risk posture, andimplementationtradeoffs.
• Createand driveadoptionoftemplates,reference implementations,documentation, examples, and paved-road patterns that help application teams adopt secure development and AI-assisted workflows.
• Improve developer experience byidentifyingsystemic friction,reducing setup time,eliminatingmanual toil, standardizing common workflows, and making secure patterns easy to adopt.
• Establish and matureoperational practices for owned capabilities, including monitoring, alerting, dashboards, runbooks, support models, service ownership, and lifecycle management.
• Identify recurring developer pain points and influence roadmap by proposingimprovements to shared frameworks,templates, platform tooling, and paved paths.
• Leadintegration of secure software delivery controls into development workflows, including CI/CD guardrails, policy checks, artifact controls, and developer remediation patterns.
• Contributehands-onacross Builder Tools & Platforms priorities as team needs evolve, including developer tooling, platform automation, secure delivery patterns, internal frameworks, and operational support.
• Mentor and coach engineers, raise engineering standards, review design and implementations, and help teams make durable technical decisions across platform andapplicationsboundaries.

• 10+ years of experience in software engineering, platform engineering, Dev Ops, infrastructure automation,secure software delivery,or a related role.
• Deepsoftware engineering experience designing,implementing,andoperatingdeveloper platforms, internal tools, infrastructure automation, CI/CD systems, or secure software delivery platforms.
• Very strongprogramming skills in Python or Type Script/JavaScript.
• Significant experience with Git Hub, Git Hub Actions, CI/CD workflows, and modern software delivery practices.
• Significant experience with AWS or another cloud provider for deploying and managing applications or platform services.
• Experience with Docker and containerized applications.
• Strong understanding of secure software development practices, software supply chain, dependency management, vulnerability scanning, artifact management,secretshandling,identity, authorization,and policy enforcement.
• Proven ability toset technical direction anddesign systems that balance security, standardization, usability, reliability, and developer productivity.
• Proven experience leading technical initiatives with cross‑functional stakeholders.
• Demonstrated ability to mentor engineers, raise technical standards, and guide teams through architecture,design, implementation, and operational tradeoffs.
• Expert troubleshooting skills across application code, build pipelines, cloud infrastructure, networking, identity, developer tooling, and third‑party platforms.
• Demonstrated ability to adapt to changing team priorities,operateeffectively inambiguousproblem spaces,and contribute across a range of platform engineering responsibilities, including areas outside immediate prior experience.

• Experience with AI-assisted development tooling, AI gateway patterns, model or API access controls, policy-as-code, telemetry, or runtime…