Senior DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee engineering, administration, and ongoing enhancement of the GitLab platform.

• Set up enterprise CI/CD standards utilizing reusable GitLab pipeline templates, shared libraries, automation frameworks, and deployment workflows.

• Execute and enhance automated application security, software supply chain security, and compliance validation throughout the CI/CD lifecycle.

• Create and sustain standardized Kubernetes deployment patterns employing GitOps, Helm, progressive deployments, and automated validation.

• Manage the GitLab Container Registry, package repositories, artifact repositories, and dependency management platforms.

• Work in conjunction with Cloud Systems Owners on automated deployment, scalability, resiliency, and platform reliability.

• Enhance build performance, deployment reliability, release quality, and developer productivity through automation and self-service capabilities.

• Collaborate with cybersecurity teams on security policies, Federal guidelines, and continuous monitoring.

• Direct troubleshooting and root cause analysis for build, deployment, pipeline, dependency, and software delivery failures.

• Review and provide guidance on pipeline designs, deployment strategies, automation solutions, and engineering practices.

• Define and track software delivery metrics, pinpointing areas for productivity and operational excellence improvements.

• Uphold DevSecOps standards, documentation, release management processes, operational guidance, and governance documentation.

• Mentor DevSecOps Platform Engineers while offering technical leadership.

• Assess emerging DevSecOps technologies, AI-assisted engineering capabilities, methodologies, and automation techniques.

• Engage in Agile ceremonies while supporting multiple software development teams.

⛳️ Requirements

• Bachelor's degree in Computer Science, Software Engineering, Information Systems, Engineering, or a related field with 8–12 years of relevant experience, or a Master's degree with 6–10 years of experience.

• Extensive experience in designing, implementing, and managing enterprise CI/CD platforms that support large-scale software development.

• Advanced experience in developing and managing GitLab CI/CD pipelines, which includes GitLab Runners, reusable pipeline templates, variables, artifacts, deployment workflows, and pipeline optimization.

• Significant experience in administering GitLab repositories, managing merge requests, branching strategies, permissions, source code management, and platform governance.

• Extensive experience in developing Infrastructure as Code using Terraform, AWS CloudFormation, or equivalent technologies.

• Advanced experience in deploying containerized applications using Docker, Kubernetes, Helm, and GitOps methodologies or similar tools.

• Strong experience in developing automation using Bash, Python, or similar scripting languages.

• Experience in administering Linux environments that support CI/CD platforms and software development workflows.

• Experience in supporting AWS cloud services and cloud-native application deployments.

• Comprehensive knowledge of software supply chain security, secrets management, dependency management, secure software development practices, and automated security testing.

• Experience in integrating automated testing, quality gates, compliance validation, and security scanning into enterprise CI/CD pipelines.

• Proven ability to lead technical initiatives, mentor engineers, establish engineering standards, and enhance software delivery practices.

• Strong troubleshooting, communication, collaboration, and problem-solving capabilities.

• Eligibility to obtain an SF-85 Public Trust suitability determination.

• Preferred: experience in supporting FAA, DoD, or other Federal software development programs; leading DevSecOps initiatives within large Agile or SAFe organizations; enterprise GitOps with GitLab and Kubernetes; security platforms such as GitLab Ultimate Security, SonarQube, Checkmarx, Veracode, Snyk, or Trivy; artifact platforms like Nexus Repository Manager or Artifactory; cloud-native Kubernetes and AWS development; automated testing, approvals, quality gates, compliance validation, and release governance; AWS, GitLab, Kubernetes, Terraform, or similar certifications.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Competitive salary and performance-based bonuses.

• Opportunities for professional development and training.

• Flexible working hours and remote work options.

• Generous vacation and paid time off policies.