Principal DevOps Engineer

OneTrust’s mission is to enable organizations to use data and AI responsibly. Our platform simplifies the collection of data with consent and preferences, automates the governance of data with integrated risk management across privacy, security, IT/tech, third-party, and AI risk, and activates the responsible use of data by applying and enforcing data policies across the entire data estate and lifecycle. OneTrust supports seamless collaboration between data teams and risk teams to drive rapid and trusted innovation. Recognized as a market pioneer and leader, OneTrust boasts over 300 patents and serves more than 14,000 customers globally, ranging from industry giants to small businesses. The Challenge We are seeking a Principal DevOps Engineer to lead infrastructure automation initiatives across OneTrust’s Cloud Engineering and IBA teams. This role is central to designing and implementing scalable, secure, and resilient infrastructure using Terraform, and building robust CI/CD pipelines that accelerate delivery while maintaining compliance and reliability. You will collaborate across engineering, security, and operations to drive automation, standardization, and continuous improvement. This role will also involve being embedded into Module/Product teams as a DevOps representative, understanding their requirements and working with Automation / CI CD teams to incorporate Infra IAC modules. Your Mission Infrastructure Automation Architect and implement Infrastructure as Code (IaC) using Terraform to provision and manage cloud resources in Azure. Develop reusable modules and automation patterns to support platform and internal applications. Ensure infrastructure is secure, compliant, and aligned with OneTrust’s operational standards. Design, build, and maintain CI/CD pipelines using GitLab and Jenkins to support rapid and reliable software delivery. Integrate automated testing, security scanning, and deployment strategies into pipelines. Collaborate with development teams to optimize pipeline performance and usability. Security & Compliance Embed security controls and compliance checks into infrastructure and pipeline workflows. Partner with InfoSec and Compliance teams to ensure alignment with SOC 2, ISO 27001, and other frameworks. Maintain SLA compliance for DevOps-supported tools and services. Mentor DevOps engineers and promote best practices in automation and cloud operations. Work closely with internal Cloud Engineering and development teams to align infrastructure with business goals. Participate in architectural reviews and contribute to long-term infrastructure strategy. You Are/Have 8+ years of experience in DevOps, Cloud Engineering, or Infrastructure Automation. Deep expertise in Terraform and Infrastructure as Code principles. Strong experience with CI/CD tools including GitLab, Jenkins, and pipeline design. Proficiency in Python and Ansible for scripting and configuration management. Solid understanding of Azure cloud services and architecture. Experience with containerization and orchestration (Docker, Kubernetes). Familiarity with security and compliance frameworks relevant to enterprise environments. Preferred Certifications HashiCorp Certified: Terraform Associate For California, Colorado, Connecticut, Nevada, New York, Rhode Island, and Washington-based candidates: the annual base pay range for this role is listed below. Within this range, individual pay is determined by several factors, including location, job-related skills, work experience, and relevant education and/or training. This role may also be eligible for discretionary bonuses, equity, and/or commissions, as well as benefits. Salary Range $139,725 - $209,587.50 USD Where we Work We are embracing an office first culture, encouraging three days a week in office for most roles, with meaningful opportunities to collaborate and celebrate in person. Each role may have specific requirements or flexibility depending on the scope of the position, so we encourage you to verify this with your recruiter during your first interview. As an employee at OneTrust, you will be part of the OneTeam. That means you’ll receive support physically, mentally, and emotionally so that you can do your best work both in and out of the office. This includes comprehensive healthcare coverage, flexible PTO, equity RSUs, annual performance bonus opportunities, retirement account support, 14+ weeks of paid parental leave, career development opportunities, company-paid privacy certification exam fees, and much more. Specific benefits differ by country. For more information, talk to your recruiter or visit /careers. Resources Check out the following to learn more about OneTrust and its people: You have the right to have your personal data updated or removed. You also have the right to have a copy of the information OneTrust holds about you. Further details about these rights are available on the website in our Privacy Overview. You can change your mind at any time and have your personal data removed from our database. In order to do this you must contact us and let us know you wish to be removed. The request should be made on the Data Subject Request Form. Recruitment fraud warning: OneTrust is aware of scams involving false offers of employment with our company. The fraudulent jobs, interviews and job offers use fake websites, email addresses, group chat and text messages. We do not interview prospective candidates via instant message or group chat, and do not require candidates to purchase products or services, or process payments on our behalf as a condition of any employment offer. Please note that any legitimate interview availability requests will come directly from a OneTrust recruiter with an "@" email address. You may also receive legitimate emails from "@us.greenhouse-mail.io". Job offers will come from a recruiter and may have a "@" email address. For more information or if you have been targeted please reach out to . Our Commitment to You When you join OneTrust you are stepping onto a launching pad — the countdown has begun. The destination? A career without boundaries working alongside a diverse and inclusive crew who is passionate about doing meaningful work. As a pioneer, your voice and expertise will help chart the direction of an entirely new category. Our commitment to putting people first starts with you. Your growth is part of the mission. Our goal is to give you the power to embark on the next phase of your uniquely, unique career. OneTrust provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by local laws. Voluntary Self-Identification For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file. As set forth in OneTrust’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law. If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows: A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability. A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service. An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense. An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985. Select… PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete. #J-18808-Ljbffr

Created: 2025-09-28