Medtronic - Principal Software DevOps Engineer - Cloud Security

Description : At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all.Youll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.A Day in the Life : As a Principal Cloud Security Enablement Engineer, you will be responsible for leading the design, development, and strategic implementation of secure, scalable patterns and automation that empower development teams to embed security seamlessly into their software delivery workflows.In this role, you will architect and drive the integration and operationalization of tools such as Contrast Security, SonarQube, JFrog Xray, and CloudGuard (or equivalent) across CI/CD pipelines and cloud environments at scale.You will collaborate closely with engineering, security, and leadership teams to establish enterprise-wide security best practices, mentor senior engineers, and champion a culture of secure software development, enabling accelerated delivery without compromising security.Your entrepreneurial mindset and technical skills will be used, creating solutions that meet business needs and optimize customer experience directly impacting the organization and affecting the lives of millions.We believe that when people from diverse cultures, genders, and points of view come together, innovation is the result and everyone wins.Medtronic walks the walk, creating an inclusive culture where you can thrive.Responsibilities may include the following and other duties may be assigned.In general, the following responsibilities apply for the Principal Cloud Security Engineer role.This includes, but is not limited to the following : Security Tool Integration & Enablement : - Drive the strategic selection, integration, and lifecycle management of application, artifact, and infrastructure security tools (e.g., Contrast, SonarQube, JFrog Xray, CloudGuard, Wi, etc) within enterprise CI/CD pipelines and cloud platforms.- Establish organization-wide standards, reusable automation frameworks, and golden patterns to ensure scalable, consistent, and secure adoption of security tools across diverse engineering teams.- Lead cross-functional initiatives with developers, cloud engineers, and DevOps teams to optimize security tooling usability and alignment with evolving workflows and business objectives.Automation & Process Development : - Design and automate onboarding, configuration, and reporting for application and infrastructure security tools.- Contribute to standardized workflows and champion best practices for vulnerability management (detection, triage, and remediation) at both application and infrastructure levels.- Integrate and optimize security findings into enterprise developer and operational workflows (issue trackers, dashboards, alerting systems), ensuring actionable insights and measurable risk reduction.Cloud & Infrastructure Security Engineering : - Set technical direction and provide guidance on cloud and infrastructure security engineering practices to safeguard code, dependencies, artifacts, and deployed workloads at scale.- Lead and influence enterprise-wide container, supply chain, and infrastructure security initiatives by designing and enforcing robust guardrails, automation, and governance models.- Leverage infrastructure security platforms (e.g., CloudGuard, Wiz, or equivalents) to provide actionable visibility and enforce cloud security policies.Collaboration & Knowledge Sharing : - Serve as a key security thought leader and trusted advisor to engineering leadership, hands-on enabler for engineering teams, shaping the security enablement vision, roadmap, and organizational priorities.- Foster strong partnerships with product security, DevEx, operations, and compliance teams to align enablement with compliance and risk goals.- Promote a culture of security through knowledge sharing, technical leadership, and mentoring of engineers at all levels; drive internal security communities of practice and represent the organization in external forums as appropriate.Required Knowledge And Experience : - Bachelors degree in Computer Engineering, Software Engineering, Computer Science, Electrical Engineering, or related technical field.- 10+ years of experience in cloud engineering, DevOps, or security engineering roles, with a demonstrated track record of technical leadership and delivery of large-scale cloud security initiatives.- Proven leadership in designing, architecting, and implementing secure cloud solutions across complex, multi-cloud environments (AWS, Azure, GCP, etc.)- Extensive hands-on experience with CI/CD pipelines (GitHub Actions, GitHub, Azure DevOps, etc.), including designing and establishing enterprise-wide CI/CD best practices and frameworks.- Deep working knowledge of application and artifact security tools (SonarQube, JFrog Xray, Contrast Security, etc.), including evaluating, selecting, and integrating new security technologies at scale.- Experience leading adoption and integration of infrastructure security platforms (CloudGuard, Wiz, Orca, or equivalent), as well as logging and observability tooling (ELK, Dynatrace, etc.) across multiple teams or business units.- Demonstrated experience in automating onboarding, configuration, and reporting for application and infrastructure security tools at an enterprise scale.- Advanced proficiency in automation and scripting (Python, Go, or equivalent), including setting coding standards and mentoring others.- Expert-level understanding of cloud environments (AWS), including security best practices, risk management, and compliance.Physical Job Requirements : The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.Benefits & Compensation : - Medtronic offers a competitive Salary and flexible Benefits Package.- A commitment to our employees lives at the core of our values.- We recognize their contributions.- They share in the success they help to create.We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP). (ref:hirist.tech)