Staff DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Establish and guide the technical roadmap for Platform DevOps and customer deployment engineering.

• Direct technical alignment with mission stakeholders, IT teams, and security reviewers throughout the delivery process.

• Define architecture and standards for consistent deployment and lifecycle automation across both internal and customer environments.

• Oversee integration architecture for customer identity and access management systems.

• Take ownership of the technical direction and efficiency of internal CI/CD and release infrastructure.

• Lead the technical strategy concerning vulnerability management across platform infrastructure, deployment artifacts, containers, and dependencies.

• Provide technical guidance during complex incidents and investigations.

• Spearhead the technical approach to deployment authorization and security evidence, encompassing ATO, CTF, and RMF requirements.

• Mentor engineers and establish practices that enhance team effectiveness.

• Stay actively involved in delivering the platform to customers and assessing deployment results.

⛳️ Requirements

• Active US Department of War or Intelligence TS/SCI clearance.

• Bachelor's degree or higher in Computer Science, Engineering, or related disciplines.

• CompTIA Security+ Certification.

• Over 6 years of experience in DevOps, DevSecOps, or software engineering, with proven technical leadership in complex projects.

• Experience directly engaging with customer technical and mission stakeholders, deploying software within customer environments.

• More than 4 years of experience managing software deployments in US Government classified networks.

• Solid understanding of cloud infrastructure and infrastructure as code, including networking, load balancing, IAM, compute, and storage.

• Extensive production experience with Kubernetes, Linux, and Helm.

• Experience in designing and advancing GitOps delivery systems using FluxCD and Kustomize.

• Experience managing internal CI/CD infrastructure, including GitLab pipelines, self-hosted runners, and container registries.

• Proficient in designing secure, reproducible Docker container builds utilizing BuildKit or Buildx.

• Experience in defining and enhancing software supply-chain security and vulnerability management, including scanning, SBOM, signing, and attestation practices.

• Strong understanding of secure service networking and access controls, including Istio, Kubernetes Gateway API, SOPS, Kyverno, and cloud IAM.

• Good working knowledge of operating PostgreSQL, Elasticsearch, Qdrant, and S3-compatible storage.

• Proficiency in Python or Bash, Git, and YAML/JSON configuration.

• Strong familiarity with metrics, logs, traces, and incident diagnosis using Grafana, Prometheus, and OpenTelemetry.

• Good understanding of authentication and identity federation using Keycloak and OIDC/OAuth2.

• Must be eligible to work in the US without sponsorship.

🏝️ Benefits

• Competitive compensation and benefits.

• Opportunities for professional growth and development.