Senior DevSecOps Engineer
We are looking for a DevSecOps Engineer to stand up and maintain infrastructure and pipelines in both the cloud, and on-premise air-gapped environments. They should also have hands-on experience with at least one production distribution of Kubernetes, CI/CD Pipelines (above and beyond build pipelines), and with at least one cloud provider. Experience maintaining and upgrading infrastructure and Kubernetes clusters is desired. They should also be familiar with at least one pipeline orchestrator (Gitlab, Jenkins, Github). Experience with Python or another scripting language is also desirable. Must have some experience with Infrastructure as Code and automation.
Key Responsibilities:
Architecture & Strategy: Design enterprise-scaleDevSecOpsand cloud-native architectures across AWS, Azure, GCP, andon-premise; define technical roadmaps; apply Zero Trust and defense-in-depth principles; lead architecture reviews and threat modeling.
Platform & Infrastructure: Stand up andmaintainsecure infrastructure (cloud andon-premiseair-gapped), including Kubernetes clusters and container platforms; oversee environment automation and reproducible provisioning.
CI/CD & Pipelines: Architect and implement CI/CD andGitOpspipelines that integrate security scanning, compliance validation (RMF/NIST), automated testing, and continuous ATO/cATOworkflows; design pipeline orchestration using tools such as GitLab CI, Jenkins, GitHub Actions,ArgoCD,andFlux.
Infrastructure as Code(IaC)& Automation: ChampionIaCand environment templatization (Terraform, Ansible,Kustomize, Helm, Jinja, etc.); automate provisioning, configurationmanagement, and operational tasks.
Security & Compliance: Integrate security controls into pipelines andplatforms(secrets management, IAM,microsegmentation); ensure adherence to DoD security frameworks, RMF, and authorization processes; lead security architecture reviews.
Operations & Upgrades:Maintainand upgrade production infrastructure and Kubernetes clusters; implement observability, monitoring, logging, and incident response practices.
