DevSecOps Lead
GRAM, San Francisco Bay Area
About the companyGRAM Corporation scales skilled labor for the physical economy. We design, manufacture and operate insectoids, general-purpose machines not built in our image. They work in large populations on the critical infrastructure nations depend on. The electric grid comes first. Our research is in how those populations coordinate and keep themselves running. The goal is Self-Replication (SR), the point where a population of machines delivers more labor than it takes to build and run.
The roleYou will own how software and models get from an engineer’s branch onto a robot in the field. You will build the pipeline from scratch: CI/CD, test infrastructure, the release process and deployment to robots, with security built in and models versioned alongside code. This is a hands-on role: you will build the first version yourself and set the practices the rest of engineering follows. You start as an individual contributor, with a path to build and lead a team as the company grows.
What you will do- Build CI/CD for the robot software, firmware and ML workflows, from pull request to signed, reproducible release artifact.
- Own the release process: versioning code and models together, release gates, and audit ready traceability from a deployed robot back to source.
- Own deployment to robots: image based updates, over the air delivery, staged rollout and rollback.
- Stand up the test and compute infrastructure, on prem and in the cloud, CI, simulation and training, working with the Autonomy, Simulation and Systems Integration teams.
- Build security into the pipeline and the robot: artifact signing, vulnerability and dependency scanning, secrets management, access control and secure updates.
- Own observability and incident response for infrastructure and deployed robots, and the artifact storage for models, datasets and logs.
- You have built a CI/CD pipeline from scratch.
- Security at a working level, with real controls put into a pipeline: vulnerability scanning, secrets management, access control and signed, secure delivery.
- You have deployed and updated software on embedded or edge devices in the field, not only cloud services.
- CI/CD for a large C++ codebase, with build systems such as CMake or Bazel.
- Strong Linux skills.
- 5+ years in the discipline, with hands-on experience valued over a degree.
- Infrastructure as code (Terraform) and cloud infrastructure experience.
- GPU and ML training infrastructure.
- Policy as code or compliance automation.
- CI and packaging for ROS 2 workspaces (colcon, rosdep).
- Setting up AI coding assistants with review and security guardrails.
- A robotics or autonomous vehicle background, with experience shipping software to physical devices.
- A clean slate: design the build, release and deployment pipeline from scratch.
- Early equity, included in the package.
- The chance to own a domain and build a team around it as the company scales.
- A hands on culture where engineers work directly on the core technology.
Skills Required
- Experience building a CI/CD pipeline from scratch
- Working security experience implementing vulnerability scanning, secrets management, access control, and signed secure delivery
- Experience deploying and updating software on embedded or edge devices in the field
- Experience with CI/CD for a large C++ codebase using build systems such as CMake or Bazel
- Strong Linux skills
- At least 5 years of experience in the discipline
- Infrastructure as code using Terraform and cloud infrastructure experience
- GPU and machine-learning training infrastructure experience
- Policy as code or compliance automation experience
- CI and packaging for ROS 2 workspaces using colcon and rosdep
- Experience setting up AI coding assistants with review and security guardrails
- Robotics or autonomous vehicle background with experience shipping software to physical devices
What We Do
Humanity's birthright is to become galactic. GRAM is founded to serve this mission. We are a foundational AI and robotics startup birthing the machines and intelligence necessary to solve the physical labor bottleneck preventing space industrialization. Our first product is a general-purpose insectoid designed for work in vast swarms for operation in extreme environments. Over the coming century, our systems will build the critical infrastructure needed for humanity's expansion across the Milky Way.
