DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Create and sustain reusable GitHub Actions workflow libraries for tenant application repositories.

• Develop and implement CI/CD pipelines that deploy a self-service platform into customer Azure environments.

• Set up and enhance Pulumi TypeScript infrastructure-as-code frameworks.

• Deploy and manage AKS clusters, load balancers, node pools, NSGs, and Istio service mesh routing.

• Containerize tenant applications using multi-stage Docker builds and deploy them to AKS.

• Integrate and uphold security scanning with Semgrep, Grype/Snyk, and Trivy.

• Generate SBOMs and sign images using Cosign/Sigstore.

• Implement quality gates in CI workflows.

• Automate multi-tenant onboarding, which includes namespace provisioning, RBAC bindings, and virtual service creation.

• Oversee container registries, versioning, and release automation.

• Assist in maintaining observability infrastructure for platform and AI/ML workloads.

• Support AI/ML platforms leveraging Kubernetes, Azure AI Foundry, and Azure ML Workspaces.

• Collaborate with software engineers to prepare applications for production deployment.

• Adhere to DevSecOps, infrastructure-as-code, SRE, and operational visibility best practices.

• Create clear documentation for systems, infrastructure, and automation.

⛳️ Requirements

• Must be a U.S. Citizen to qualify for VA clearance.

• Bachelor’s degree with over 7 years of relevant experience.

• Self-sufficient, with a commitment to continuous learning, self-study, and resourcefulness.

• Excellent communication skills with a polished, customer-facing demeanor.

• Capable of producing concise yet valuable documentation for system design and automation processes.

• A minimum of 5 years of core experience with GitHub Actions CI/CD, including reusable workflow creation.

• Proficient in multi-stage Dockerfiles, container image scanning, registry management, versioning, and release automation.

• Experienced in SAST, SCA, container vulnerability scanning, SBOM generation, and image signing.

• Familiar with Kubernetes cluster operations, including node pools, namespaces, RBAC, health probes, resource limits, autoscaling, and rolling deployments.

• Knowledgeable in OWASP, Zero Trust principles, encryption at rest and in transit, FISMA High controls, and managing PII/PHI in cloud environments.

• Experienced with Agile methodologies such as Kanban, Scrum, or SAFe.

• Production experience with Azure AKS, Key Vault, VNet/NSG networking, and Azure Blob Storage.

• Experience in multi-tenant Kubernetes platform operations.

• Familiarity with Istio service mesh, including VirtualService/Gateway configuration, mTLS, and multi-tenant routing.

• Pulumi with TypeScript is strongly preferred; experience with Terraform or Pulumi is also valued.

• Previous experience with a VA, DoD, or other federal FISMA High system with ATO experience is preferred.

• Experience with Azure AI Foundry, Azure ML Workspaces, GPU node pool provisioning, and AI/ML workload scheduling is preferred.

• Familiarity with Python (FastAPI) and Node.js/React containerization patterns is preferred.

• Experience in establishing observability, monitoring, and logging for cloud platforms is preferred.

🏝️ Benefits

• Health insurance

• Dental insurance

• Vision insurance

• Life insurance

• Disability insurance

• 401(k) package

• Generous Paid Time Off

• Ongoing professional development

• Equal opportunity employer / Disability / Veterans