Senior DevSecOps Engineer

Salary: $76,000 - 116,000 per year Requirements:

• We require a bachelors degree in Computer Science, Computer Engineering, IT, Cybersecurity, or equivalent practical experience.
• We need 5+ years of hands-on experience in software deployment, cloud platform engineering, DevOps, or DevSecOps within an enterprise or Department of War environment.
• We require U.S. citizenship and an active Secret clearance, or the ability to obtain and maintain a U.S. Government Top Secret/SCI clearance.
• We need expert-level proficiency with AWS/AWS GovCloud, Kubernetes architecture, Docker/container runtimes, and Linux administration/scripting (Bash, Python, Go).
• We require advanced experience designing enterprise-grade GitLab CI/CD pipelines and orchestrating infrastructure with Terraform.
• We require an active DoD 8570/8140 IAT Level II or IAM Level II/III certification, such as Security+, CySA+, CISSP, or CISM.
• We require the ability and willingness to travel up to 20% to client sites, customer locations, and industry conferences.
• We require regular presence in Dayton, Ohio for frequent or weekly meetings in Dayton and at WPAFB.
• We also value deep expertise in container security scanning and governance tools such as Anchore, Trivy, SonarQube, NeuVector, or Sysdig.
• We value experience with central authentication and identity providers such as Okta, Keycloak, or OIDC/SAML.
• We value proven mentoring experience with mid-level and junior engineers on cloud-native practices, secure coding, and operational excellence.
• We value strong technical writing skills for architectural blueprints, compliance documentation, and SOPs.
• We value excellent communication skills to bridge technical needs between software teams, product managers, and government stakeholders.
• We value flexibility to support high-priority deployment windows or mission-critical outage recovery.
• We value direct hands-on experience with Platform One, Big Bang architecture, Iron Bank hardened container baselines, and AWS C2S/SC2S environments.
• We value a track record of assisting with or leading cATO accreditation efforts for defense or intelligence customer applications.

• We lead the architecture, design, and ongoing refinement of enterprise CI/CD pipelines using GitLab CI or similar deployment platforms.
• We design and mature GitOps workflows with FluxCD or ArgoCD to manage multi-cluster state across complex environments.
• We establish automated testing, vulnerability gating, caching strategies, and performance benchmarks to reduce build and release cycle times.
• We provide tier-3 escalation support and root-cause analysis for build, deployment, and automation pipeline issues.
• We define technical standards, best practices, and code review expectations across DevOps and DevSecOps work.
• We architect, deploy, and maintain secure, highly available cloud-native infrastructure using AWS GovCloud and Kubernetes.
• We design scalable infrastructure-as-code frameworks such as Terraform or OpenTofu for cloud, on-premises, and air-gapped provisioning.
• We establish containerization standards, custom Helm chart patterns, and orchestration approaches across multi-tenant Kubernetes clusters.
• We lead deployment architectures and secure baseline configurations across multiple security enclaves, including NIPRNet, SIPRNet, JWICS, and C2S/SC2S.
• We embed shift-left security controls into delivery workflows, including automated SAST/DAST, container scanning, SBOM generation, and dependency tracking.
• We drive compliance-as-code efforts to enforce DoD cybersecurity directives, STIGs, and NIST SP 800-53 controls in support of cATO acceleration.
• We champion adoption of DoD Enterprise DevSecOps reference architectures such as Platform One and Big Bang, along with hardened container pipelines using Iron Bank.
• We architect observability and telemetry stacks such as Prometheus, Grafana, Loki, and Jaeger for proactive monitoring, alerting, and operational insight.
• We lead disaster recovery, high availability, and business continuity planning, including automated backup and restore processes for Kubernetes clusters and stateful services.
• We evaluate, pilot, and introduce emerging cloud-native and DevSecOps technologies to improve team capability and platform efficiency.

• AWS
• Architect
• ArgoCD
• Bash
• CI/CD
• Cloud
• DevSecOps
• DevOps
• Docker
• GitLab
• GitOps
• Grafana
• Helm
• IAM
• Support
• Kubernetes
• Linux
• Prometheus
• Python
• SAML
• Security
• Terraform
• Windows

More:

We are Tangram Flex, and our team builds solutions that help innovators design, develop, verify, and advance critical systems while accelerating delivery in support of national security. We value a Team First culture and offer a highly competitive benefits package, including hybrid work options, flexible working hours, 10 paid holidays, generous PTO, employer-paid medical, dental, vision, and short- and long-term disability insurance, group life insurance rate plans, employer HSA contributions, a competitive 401(k) match, and a collaborative engineering environment focused on transparency, teamwork, and continuous growth through internal tech community events such as Lightning Talks and Integration Events.

last updated 36 week of 2026