DevSecOps Engineer in Irvine, California at Field AI
Explore Related Opportunities
Job Description
Who are We?
Field AI is transforming how robots interact with the real world. We are building risk-aware, reliable, and field-ready AI systems that address the most complex challenges in robotics, unlocking the full potential of embodied intelligence. We go beyond typical data-driven approaches or pure transformer-based architectures, and are charting a new course, with already-globally-deployed solutions delivering real-world results and rapidly improving models through real-field applications.
Learn more at https://fieldai.com.
About the JobAs a Senior DevSecOps Engineer, you will operate at the intersection of AI infrastructure, edge computing, and defensive security. You won't just respond to alerts; you will engineer the hardened systems that make those alerts actionable, automated, and resilient. You will treat security as a first-class reliability feature, ensuring that our robotic fleet and AI training environments scale securely without manual intervention.
What You’ll Get To DoSecurity Engineering & Automation: Design and build production-grade software to automate security tasks (e.g., automated certificate rotation, secret management, or self-healing network policies for autonomous systems).
Reliability for Mission-Critical Services: Own the service level objectives/indicators, and error budgets for core security infrastructure, including identity management, encrypted communication channels, and high-availability inference services.
Infrastructure as Code (IaC): Architect and manage secure-by-default infrastructure for both cloud and edge deployments to ensure repeatable and audited systems.
Incident Response & Forensic Analysis: Lead technical incident response for both security breaches and system outages, focusing on root cause analysis and code-based fixes to harden the UNIX/Linux environment.
Shift-Left Integration: Develop and maintain automated security scanning (SAST/SCA/secret detection) within CI/CD pipelines to empower developers to ship code securely to the field.
High-Performance Programming: 5+ years of experience writing production-quality code in C++ and Python.
Distributed Systems Mastery: Deep understanding of data structures, algorithms, and the complexities of large-scale distributed systems and real-time data processing.
Security Domain Expertise: Advanced knowledge of encryption (TLS/PKI), authentication protocols (OAuth/SAML), and container/workload hardening.
Observability Stack: Hands-on experience building custom telemetry, dashboards, and alerting for fleet-wide health and security monitoring.
System Internals: Expert-level grasp of UNIX / Linux system hardening, networking protocols (TCP/IP, DNS), and securing high-performance compute hardware.
Hands-on experience designing or operating secure OTA/update pipelines, including artifact signing, verification, and rollback safety
Strong background in infrastructure security at scale, including Kubernetes, container runtimes, and workload isolation in high-risk environments
Experience building or hardening device identity and fleet authentication systems, including certificate lifecycle management and device attestation
Familiarity with robotics middleware or real-time systems (e.g., ROS/ROS2, DDS, or similar distributed communication frameworks)
Experience applying zero-trust principles to distributed systems spanning cloud and edge environments
Experience with adversarial testing or security research, particularly in distributed or infrastructure-level systems
Strong understanding of software supply chain security, including SBOMs, build provenance, and secure artifact pipelines
$70,000 - $300,000 a year