Principal DevSecOps Engineer

About the EcoStruxure Building Data Platform

The EcoStruxure Building Data Platform is Schneider Electric's independent data layer for collecting, contextualizing, storing, and analyzing building operational data at scale.

The platform ingests and processes real-time telemetry from connected building systems using cloud-native technologies hosted in Microsoft Azure.

It provides the foundation for analytics, digital services, applications, and customer integrations across Schneider Electric's building ecosystem.
Role Overview
We are seeking a Principal DevSecOps Engineer to own the implementation, operation, and continuous improvement of the security posture of the EcoStruxure Building Data Platform.

This role serves as the hands-on security leader embedded within the engineering organization.

The successful candidate will lead security tooling, security automation, vulnerability remediation coordination, software supply chain security, Secure SDLC implementation, release security readiness, and cloud security enablement across the platform.

The Principal DevSecOps Engineer is accountable for the implementation and operational execution of product security controls.

This role works closely with:


* Security Advisor


* Principal Systems Engineer


* Engineering Technical Leads


* Principal Cloud Operations & Infrastructure Engineer


* Product Owners


* Schneider Electric Product Security


* 24x7 Operation Support Team

The Security Advisor remains responsible for independent governance, risk assessment, policy interpretation, CPCERT alignment, risk acceptance guidance, and security oversight.

In this role, you are responsible for implementation, execution, automation, evidence generation, and remediation coordination.

Key ResponsibilitiesSecurity Posture Management


* Own the operational security posture of the EcoStruxure Building Data Platform.


* Establish and maintain security baselines across applications, cloud services, containers, APIs, CI/CD systems, and supporting platform components.


* Continuously assess security maturity and identify opportunities for improvement.


* Implement security controls and automation that reduce platform risk.


* Report operational security health, remediation status, and security trends.

Vulnerability Management & Remediation


* Operate vulnerability management activities in accordance with Schneider Electric CPCERT processes and security requirements.


* Perform technical triage of findings from SonarQube, Black Duck Binary Analysis (BDBA), penetration tests, container security scans, dependency analysis tools, and cloud security assessments.


* Assess technical applicability of vulnerabilities and identify remediation approaches for affected platform components.


* Partner with the Security Advisor on vulnerability prioritization, risk evaluation, exception reviews, and remediation timelines.


* Lead remediation planning and coor...