DevSecOps Engineer

(IDQ) as part of IONQ, is a global leader in quantum-safe communications and quantum detection systems. We provide solutions to protect governments, telecommunication infrastructures, and banking & financial institutions from the “harvest-now, decrypt-later” threat, delivering both terrestrial and space-based quantum-safe networks in live operation globally. Our Quantum Detection Systems push the limits of single-photon detection, powering breakthroughs in quantum communication, sensing, computing, and ultra-sensitive imaging in partnership with top researchers and tech innovators worldwide.

What to expect

The Platform Engineering team builds, secures and operates scalable infrastructure supporting cloud-managed SaaS products with on-premises components deployed at customer sites.

As our Staff Dev Sec Ops  Engineer, you will provide the technical leadership for our software factory, defining how software is built, secured and released across the organisation. You will own the roadmap, architecture and tooling that enable every engineering team to deliver software securely, consistently and at scale, while remaining hands‑on with automation, infrastructure and platform engineering.

Working closely with Architecture, Site Reliability Engineering, Cloud Operations and Product Development, you will drive an automation‑first culture where secure software delivery, developer experience and operational excellence are embedded into every stage of the software lifecycle.

Define and evolve the software factory, including CI/CD platforms, release engineering, developer tooling, Infrastructure as Code, dependency management and software supply‑chain security.

Deliver secure‑by‑default engineering practices through automated security controls, policy enforcement, vulnerability management, compliance automation and AI‑driven workflows.

Mentor engineers, establish engineering standards and collaborate across technical teams to deliver scalable, secure and highly automated development platforms.

What you'll be doing

You will lead the design, implementation and operation of the organisation's Dev Sec Ops  platform, ensuring software moves securely and efficiently from commit to production. You will develop reusable CI/CD pipelines, Infrastructure as Code modules and self‑service developer capabilities that improve productivity whilst maintaining the highest security standards.

You will own release management, dependency and supply‑chain security, security operations and hybrid infrastructure consistency across cloud and on‑premises environments. You will also drive the adoption of agentic automation and AI‑enabled workflows to reduce manual effort, improve operational efficiency and enhance software delivery.

Own the software‑factory roadmap, CI/CD platform, release engineering, Infrastructure as Code, internal developer platform and software supply‑chain security.

Embed security throughout the delivery pipeline through automated scanning, policy enforcement, vulnerability management, secrets management and continuous compliance.

Develop agentic automation for pipeline operations, dependency management, release processes and operational support, while providing technical leadership, mentoring and engineering governance.

What you'll bring

You are an experienced Dev Sec Ops  or Platform Engineering leader with more than eight years of production engineering experience and recent hands‑on responsibility for building and operating enterprise‑scale CI/CD platforms.

You have designed production Infrastructure as Code, embedded security into delivery pipelines and delivered measurable improvements across software delivery, release management, dependency governance or vulnerability remediation. You are passionate about automation and continuously removing manual effort through tooling, scripting and intelligent workflows.

8+ years of production engineering experience with recent hands‑on responsibility for enterprise‑scale CI/CD platforms, Infrastructure as Code and production automation.

Proven experience embedding security into software delivery through automated scanning, policy enforcement, vulnerability management and…