DevSecOps Lead

DevSecOps Lead

GRAM, San Francisco Bay Area

About the company

GRAM Corporation scales skilled labor for the physical economy. We design, manufacture and operate insectoids, general-purpose machines not built in our image. They work in large populations on the critical infrastructure nations depend on. The electric grid comes first. Our research is in how those populations coordinate and keep themselves running. The goal is Self-Replication (SR), the point where a population of machines delivers more labor than it takes to build and run.

The role

You will own how software and models get from an engineer’s branch onto a robot in the field. You will build the pipeline from scratch: CI/CD, test infrastructure, the release process and deployment to robots, with security built in and models versioned alongside code. This is a hands-on role: you will build the first version yourself and set the practices the rest of engineering follows. You start as an individual contributor, with a path to build and lead a team as the company grows.

What you will do

• Build CI/CD for the robot software, firmware and ML workflows, from pull request to signed, reproducible release artifact.
• Own the release process: versioning code and models together, release gates, and audit ready traceability from a deployed robot back to source.
• Own deployment to robots: image based updates, over the air delivery, staged rollout and rollback.
• Stand up the test and compute infrastructure, on prem and in the cloud, CI, simulation and training, working with the Autonomy, Simulation and Systems Integration teams.
• Build security into the pipeline and the robot: artifact signing, vulnerability and dependency scanning, secrets management, access control and secure updates.
• Own observability and incident response for infrastructure and deployed robots, and the artifact storage for models, datasets and logs.

What you bring

• You have built a CI/CD pipeline from scratch.
• Security at a working level, with real controls put into a pipeline: vulnerability scanning, secrets management, access control and signed, secure delivery.
• You have deployed and updated software on embedded or edge devices in the field, not only cloud services.
• CI/CD for a large C++ codebase, with build systems such as CMake or Bazel.
• Strong Linux skills.
• 5+ years in the discipline, with hands-on experience valued over a degree.

Nice to have

• Infrastructure as code (Terraform) and cloud infrastructure experience.
• GPU and ML training infrastructure.
• Policy as code or compliance automation.
• CI and packaging for ROS 2 workspaces (colcon, rosdep).
• Setting up AI coding assistants with review and security guardrails.
• A robotics or autonomous vehicle background, with experience shipping software to physical devices.

Why join

• A clean slate: design the build, release and deployment pipeline from scratch.
• Early equity, included in the package.
• The chance to own a domain and build a team around it as the company scales.
• A hands on culture where engineers work directly on the core technology.