DevSecOps Engineer

DevSecOps Engineer

Los Angeles, California | Full time, onsite | Relocation supported

We are working with a spacecraft technology company in Los Angeles that designs and builds custom satellites for government and prime contractor customers. Small engineering team, funded, with hardware already flying. This is a hands on build and own role.

The role

You will own the software supply chain that delivers the company’s products into a hardened AWS GovCloud environment. This is the link between product engineering and the cloud platform, from a developer commit through automated build, test and security scanning, to a signed and packaged product ready for deployment.

• Administer GitLab and the CI/CD platform, covering runner fleets, project and group structure, pipeline configuration and application level security features
• Build, maintain and optimise pipelines that operate inside a constrained, air gapped GovCloud network
• Own product packaging and the self service deployment path through AWS Service Catalog, so engineering teams can provision approved infrastructure safely and repeatably
• Build, scan and publish OCI container images to Amazon ECR, including cross account distribution
• Integrate security tooling across the development lifecycle: SAST, DAST, SCA, secrets scanning and SBOM generation
• Work within a self hosted zero trust architecture and air gapped network controls alongside the platform and network security teams
• Support evidence collection and continuous monitoring for systems aligned to NIST 800-171 and 800-53
• Automate provisioning, configuration management and pipeline level security monitoring using Infrastructure as Code
• Support and mentor other engineers on DevSecOps practice and tooling

What you need

• Degree in computer science, information technology or a similar field, or equivalent practical experience
• Five or more years in a DevSecOps, DevOps or Site Reliability Engineering role
• Hands on AWS experience, ideally including service level work in AWS GovCloud
• Significant hands on GitLab administration, covering pipeline configuration, runner management and security features
• Strong knowledge of building, securing and managing container images and workflows
• Proficiency with Infrastructure as Code such as CloudFormation, CDK, Terraform or Helm
• US person, willing and eligible to obtain a DoD Top Secret security clearance. You do not need to hold one already, as sponsorship is available

Nice to have

• AWS Service Catalog or Landing Zone Accelerator
• Python scripting, with Go or PowerShell an advantage
• Experience in regulated environments building auditable, evidence generating pipelines such as SBOMs, scan reports and signing or provenance
• Familiarity with NIST 800-171 or 800-53
• Certifications such as AWS Security Specialty, CISSP or GitLab Certified Associate
• Advanced degree in a relevant technical field

What is on offer

Medical, dental and vision paid by the company for the employee, flexible vacation, 401k matching, holiday pay, and pregnancy, family and military service leave. Interview travel and relocation are covered. Full ownership of the pipeline in a team small enough that your work is visible at company level, with a fast, decisive interview process.