Senior DevSecOps Engineer

Impinj is a leading RAIN RFID provider and Internet of Things pioneer. We’re inventing ways to connect every thing to the Internet —including retail apparel, retail general merchandise, healthcare items, automobile parts, airline baggage, food and much more. With more than 100 billion items connected to date, and multiple Fortune 500 enterprises around the world using our platform, we solve for a better understanding of our world.

If it’s a thing, we’re working to connect it.

Join Impinj and help us realize our
vision of a boundless IoT— connecting trillions of everyday items to the Internet.

Our Information Security team is seeking a n experienced and results-driven Senior Dev Sec Ops  Engineer to drive secure-by-design practices throughout application development and operations. Th is role will report to the Director, Information Security , and act as a trusted security partner embedded with one of our engineering team s . You’ll shift security left by translat ing requirements into working controls, secure defaults, and pipeline guardrails.

This role requires on-site presence at our Fairview office in Seattle on a hybrid basis.

• Serve as a day-to-day security advisor for the team you support, advocating security requirements as an engineering team member during sprint planning, architecture reviews, process discussions, product direction, design decision s , and while work is in flight
• Build and maintain centralized automated security testing and enforcement in CI/CD, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code ( IaC ) scanning
• Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations
• Continually audit application environments and development processes to ensure compliance with internal and external requirements , and alignment with security standard methodologies
• Manage the company’s software development life cycle policy alongside Information Security leadership
• Implement and maintain c loud detection and response monitoring, and act as an incident CIRT responder
• Document controls, configurations, and decisions to build durable institutional knowledge

• Bachelor's degree in Computer Science , Information Technology, Cybersecurity, or equivalent practical experience
• 8 + years of experience in Dev Ops, software engineering, or security engineering
• Proficiency with CI/CD platforms ( e.g., Git Hub Actions, Git Lab CI, Jenkins ) and infrastructure as code tools (e.g., Terraform, Cloud Formation, Azure Bicep )
• Hands-on cloud security experience in AWS and/or Azure, including identity and access management, containerization , network security controls, encryption, logging, and monitoring
• Demonstrated e xperience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement
• Familiarity with penetration testing applications or experience conducting penetration testing engagements
• Strong scripting skills in Python, Bash, or Power Shell for automation and integration
• Experience supporting third-party attestations and audits (e.g., SOC 2 Type 2 , ISO 27001 ) , including preparation, implementation , and ongoing evidence collection
• Strong communication and governance skills, with the ability to translate technical risk into business terms for technical and non-technical audiences, and to advocate for security without slowing down delivery

The benefits listed below may vary depending on the nature of your employment with Impinj and the country where you work.

The typical base pay range for…