DevSecOps Engineer

Location Hillsborough County,Tampa, FL, 33611,United States Employee Type FT Exempt Travel 15% The Opportunity - THIS IS A CLEARED POSITION. Only candidates with ACTIVE SECRET Security Clearance with the U.S. Government will be considered. We are seeking a DevSecOps Engineer with deep Kubernetes expertise to design, implement, and maintain secure, scalable cloud-native platforms. This role bridges development, security, and operations to embed security throughout the software delivery lifecycle while enabling high-velocity engineering teams. Key Responsibilities Platform & Infrastructure Design, provision, and maintain production Kubernetes clusters (RKE2 / EKS / GKE / AKS) across cloud and on-premises environments Manage cluster lifecycle: upgrades, node pool scaling, multi-tenancy, and namespace governance Implement and maintain CNI solutions (Calico, Cilium, Multus) including advanced networking topologies such as macvlan and SR-IOV Operate GitOps workflows (e. g. ArgoCD) for declarative, auditable cluster state management Develop and maintain Helm charts for platform and application services DevSecOps & CI/CD Build and maintain CI/CD pipelines in GitLab CI (and/or GitHub Actions) with integrated security scanning and artifact signing Integrate SAST, DAST, SCA, and container image scanning (Trivy, Grype, Semgrep) into pipeline gates Implement supply-chain security controls: SBOM generation, cosign image signing, and Sigstore policy enforcement Automate OS image builds using Packer (QEMU, vSphere) targeting RHEL, AlmaLinux, Debian/Ubuntu, and Windows Manage secrets at scale using Vault, External Secrets Operator, or equivalent solutions Security & Compliance Enforce runtime security through admission controllers (Kyverno / OPA Gatekeeper), Pod Security Standards, and network policies Own vulnerability management processes including scheduled scanning, triage, and remediation SLAs Support compliance initiatives (SOC 2, FedRAMP, NIST 800-53) by maintaining audit-ready infrastructure-as-code and evidence artifacts Conduct threat modeling and security architecture reviews for new platform capabilities Respond to and lead post-mortems for security incidents and infrastructure outages Observability & Reliability Deploy and operate observability stacks: Prometheus, Grafana, Loki, and OpenTelemetry collectors Define and track SLOs/SLAs; build alerting and on-call runbooks to drive reliability improvements Implement cost observability and right-sizing workflows for cloud and on-prem workloads Partner with development teams to design deployment patterns, resource quotas, and autoscaling strategies Produce clear documentation, runbooks, and internal training materials for platform capabilities Mentor junior engineers and participate in architecture decision records (ADRs) Requirements Fluency in English (written and spoken) Must meet eligibility requirements to obtain US Security clearance Active US Security clearance preferred. Education High School Diploma Required Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKS) Certification Preferred Required Skills, Experience & Abilities 5+ years of hands‑on experience in a DevOps, Platform Engineering, or SRE role 3+ years managing production Kubernetes clusters at scale Deep proficiency with GitLab CI or GitHub Actions, including advanced pipeline patterns (DAGs, dynamic child pipelines, matrix builds) Strong scripting skills in Bash and at least one higher‑level language (Python, Go, or similar) Solid understanding of Linux internals, networking (TCP/IP, DNS, BGP basics), and container runtimes (containerd, CRI‑O) Experience with infrastructure‑as‑code tools: Terraform / OpenTofu and Helm Demonstrated experience integrating security tooling into CI/CD pipelines Familiarity with cloud platforms: AWS, GCP, or Azure Preferred Qualifications Experience with GPU workloads on Kubernetes (NVIDIA / Intel device plugins, GStreamer / FFmpeg hardware acceleration pipelines) Familiarity with Multus CNI and SR‑IOV networking for high‑throughput edge or media workloads Experience building images with Packer targeting multiple hypervisors (QEMU, Hyper‑V, VMware) Working knowledge of service mesh technologies (Istio, Linkerd) Exposure to FedRAMP, CMMC, or other regulated‑environment compliance frameworks Contributions to open‑source infrastructure or security projects Physical Demands & Work Environment The physical demands and work environment described are representative of those that an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Prolonged periods of sitting at a desk and working on a computer. Ability to lift up to 50 lbs. and work in austere field conditions. Ability to lift up to 15 pounds on occasion (e.g., transporting laptop, presentation materials, or small equipment). Frequent use of hands and fingers for typing, writing, and handling documents. Clear vision and hearing required for meetings, presentations, and communication. Ability to travel domestically and internationally up to 50% of the time, which may include extended periods of standing, walking, or navigating airports and government facilities. Ability to sit or stand for long periods of time. Ability to withstand abnormal environmental conditions. Frequent interaction with clients, executives, and government officials in both in‑person and virtual settings. Occasional travel to customer sites, government facilities, and industry events. Fast‑paced, deadline‑driven environment requiring adaptability and responsiveness. Work may occasionally be performed in secure government facilities, requiring adherence to security protocols. This position may involve travel to government test sites, training ranges, and operational locations, including potential OCONUS destinations for short periods of time. Work may be conducted in laboratory, workshop, office, and field environments with varying conditions. Equal Opportunity All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. NTS will also consider qualified applicants with criminal histories consistent with relevant laws for employment. For individuals with disabilities that need additional assistance at any point in the application and interview process, please email View email address on click.appcast.io #J-18808-Ljbffr