RegScale is a continuous controls monitoring (CCM) platform that helps organizations automate and scale their security, risk, and compliance programs. We are at an inflection point, transitioning from startup execution to a disciplined, enterprise ready engineering organization, and we are building the team that will take us there. This is a meaningful problem domain: the work you build directly helps organizations manage risk, meet regulatory requirements, and operate more securely at scale.
The Role
Principal Software Engineers at RegScale operate at the intersection of deep technical craft and organizational impact. A Principal Engineer at RegScale owns a system, a capability, an architectural boundary, or a set of patterns that other engineers build on top of. Your work has reach beyond your squad. The decisions you make and the standards you set shape how the broader engineering organization builds software.
You will work across customer-facing GRC capabilities and the platform primitives that underpin them including APIs, data services, SDK, scalability, and performance. You are expected to identify problems before they become crises, propose solutions that others can execute, and drive technical initiatives across team boundaries without relying on direct authority. You build consensus through credibility, clarity, and demonstrated judgment.
This role is for an engineer who is energized by technical complexity, has the communication skills to navigate organizational complexity, and measures their success not just by what they build but by the capability and confidence they leave behind in the teams around them.
Key Responsibilities
- Be a key member of the engineering leadership team, providing technical thought leadership that informs architecture, delivery, and product decisions across the organization.
- Own systems and capabilities end to end, not just features, with accountability for the technical direction, quality, and long-term health of what you lead.
- Identify architectural problems, scalability risks, and engineering patterns that need to change, and drive resolution with concrete proposals and cross team alignment.
- Design reusable, well-reasoned platform primitives and frameworks that reduce duplication and meaningfully accelerate the teams that consume them.
- Deliver across the full stack including frontend (Angular), backend (.NET, C#, Python), and data layer (PostgreSQL, SQL Server), with the depth to make sound architectural decisions at every layer.
- Lead technical initiatives across squad and functional boundaries, building alignment without direct authority through strong communication, credibility, and sound engineering judgment.
- Set engineering standards and patterns that others adopt in API design, data modeling, testing approach, and code quality, in partnership with the Architecture function.
- Proactively identify technical risk and delivery concerns weeks ahead of when they become problems, with proposed mitigations that protect business commitments.
- Develop the technical capability of the engineers around you through design reviews, mentorship, and active knowledge transfer. Measure part of your success by how much more effectively others operate because of your involvement.
- Communicate complex technical decisions and tradeoffs clearly to engineering leadership, product, and executive stakeholders.
Required Qualifications
- 12 or more years of professional software engineering experience with a portfolio of complex, cross cutting technical contributions that demonstrate system level thinking.
- Demonstrated ability to own systems or capabilities, not just features, with impact that extends across multiple teams or functional areas.
- Recognized as a technical authority who sets patterns others follow, drives adoption of standards, and shapes engineering culture through example and credibility.
- Track record of leading technical initiatives across organizational boundaries without direct authority, building consensus, navigating competing priorities, and delivering outcomes.
- Strong engineering instincts for tradeoffs including speed vs. sustainability, pragmatism vs. standards, and incremental delivery vs. architectural integrity.
- Experience proactively identifying systemic problems and proposing architectural solutions before they become crises, with concrete mitigation options that protect delivery commitments. Exceptional written and verbal communication skills, able to articulate technical strategy and tradeoffs to engineering leadership, product, and executive audiences.
Preferred Qualifications
- Experience in regulated industries or with compliance, security, or risk management platforms. GRC, FedRAMP, NIST, or OSCAL familiarity is a meaningful advantage.
- Background in enterprise SaaS companies navigating the transition from startup to scale, with direct experience managing technical debt, architectural evolution, and team capability development during that transition.
- Experience building or governing platform primitives including SDKs, CLIs, internal APIs, and shared services, with an understanding of what makes them reliable, adoptable, and maintainable across teams.
- Familiarity with AI and ML integration in production engineering contexts, particularly building reliable, observable, enterprise grade AI capabilities rather than proof of concept work.
- Cloud native experience in Azure or comparable platforms (AWS, GCP) with understanding of infrastructure constraints, deployment models, and cost implications at scale.
- Hands on experience with observability, performance profiling, and diagnosing complex production issues at enterprise scale.
RegsScale is only able to hire US Citizens
Top Skills
What We Do
RegScale overcomes speed, timeliness, and cost effectiveness limitations in legacy GRC by bridging security, risk, and compliance through our Continuous Controls Monitoring platform. Our CCM pipeline of automation, dashboards, and AI tools deliver lower program costs, strengthen security, and minimize painful handoffs between teams. Achieve rapid certification for faster market entry, anticipate threats via proactive risk management, and automate evidence collection, access reviews, and controls mapping. Improve the Return on Investment (ROI) of existing tools by seamlessly exchanging data with our centralized CCM data lake, enabling continuous monitoring of security, risk, and compliance controls. Heavily regulated organizations, including Fortune 500 enterprises – both financial institutions and other sectors – as well as the government and entities that serve them, use RegScale to enhance stakeholder trust, lower costs, adapt to evolving risks, and start and stay compliant. Our customers report a 90% faster path to compliance certifications and a 60% reduction in audit preparation efforts, strengthening security programs and reducing costs. For more information, visit www.regscale.com

.png)







