Senior DevSecOps Engineer

Position Summary:
UDRI is looking for a DevSecOps Engineer to join the SPIRE group. You will contribute to a growing team responsible for development, security and operations and development workflows supporting secure, scalable AI systems. This is a full time benefit eligible position that offers health, dental and vision insurance, retirement, disability, tuition assistance for you and your dependents, vacation/sick accrual and holiday pay.

In this role you will utilize, manage and develop DevSecOps infrastructure and tools to support for secure, scalable AI systems built primarily on top of Kubernetes. You will help to support existing systems and develop new systems to support the growing needs in AI research. You will interface directly with project leadership, scientists, and engineers to develop, document, and maintain technical solutions that supports multiple advanced technology areas. This position requires occasional domestic travel to support customer engagements, project activities, and on-site collaboration. This position is performed on-premises at the assigned work location in Dayton, Ohio

Company Culture:
Beyond the tangible perks, you will be part of a dynamic community that values integrity, diversity, and a deep commitment to serving the greater good. Our Marianist values inspire us to make a positive impact on society, and your contributions will directly further our mission of fostering innovation and advancing knowledge.

Minimum Qualifications:

1. Bachelor's degree in Computer Science, Computer Engineering, or a related field
2. 7+ years of professional experience in software engineering, systems administration, or DevSecOps, with at least 3 years in a dedicated DevSecOps, DevOps, SRE, or platform engineering role
3. Secret security clearance
4. Advanced experience with Docker, including writing and optimizing Dockerfiles (multi-stage builds, minimal base images, layer caching) and setting container standards across teams
5. Proven experience designing, deploying, and operating production container orchestration platforms such as Kubernetes (scaling, upgrades, RBAC, and troubleshooting complex workload issues), along with Docker Compose
6. Experience designing, implementing, and maintaining CI/CD pipelines that promote software through development, test, and production environments, including automated testing, security validation, and controlled release processes.
7. Strong Linux administration skills and scripting or programming experience in Bash, Python, Go, or a similar language
8. Experience with Agile methodologies and practices, including sprint planning, backlog management, and iterative software delivery.
9. Experience leading technical projects from planning through delivery, including scoping work, setting timelines, and coordinating across teams
10. Experience breaking down work and delegating tasks to engineers based on their strengths and growth goals
11. Track record of mentoring junior and mid-level engineers through code reviews, pairing, and knowledge sharing, and of setting team standards for branching strategy and code review
12. Effective written and verbal communication skills
13. Effective interpersonal skills
14. Due to the requirements of our research contracts with the U.S. federal government, candidates for this position must be a U.S. citizen

Preferred Qualifications:
While not everyone may possess all of the preferred qualifications, the ideal candidate will bring many of the following:

1. Graduate degree in Computer Science, Computer Engineering, or a related field
2. CompTIA Security+ or higher certification
3. TS/SCI clearance or eligible for TS/SCI or TS/SAP
4. Relevant certifications such as CKA, CKS, or an AWS/Azure professional-level certification
5. Extensive experience with GitLab CI and Dagger, including building reusable pipeline templates and components shared across teams
6. Experience administering JFrog Artifactory and its software assurance tools, such as JFrog Xray, including integrating artifact scanning into CI/CD pipelines
7. Experience authoring and maintaining Helm charts or Kustomize configurations for multiple services
8. Experience designing monitoring, logging, and alerting for production systems using tools such as Prometheus and Grafana
9. Strong understanding of networking (DNS, load balancing, TLS, firewalls, VPCs and subnets)
10. Experience managing configuration at scale with tools such as Ansible
11. Background in security and compliance practices, including image scanning, secrets management (Vault or similar), policy enforcement, and supply chain security
12. Experience with Azure and its DevOps pipelines
13. Experience with cloud cost optimization and capacity planning
14. Experience leading incident response and running blameless postmortems
15. Strong experience administering Red Hat Enterprise Linux (RHEL), including package management, SELinux, and system hardening
16. Experience with Java, C++, and Python, including building, testing, and packaging applications in each within CI/CD pipelines (e.g., Maven or Gradle, CMake, pip)
17. Experience working in air-gapped or disconnected environments, including mirroring container registries and package repositories, moving artifacts across security boundaries, and maintaining Kubernetes and CI/CD tooling without internet access

Closing Statement:
Informed by its Catholic and Marianist mission, the University is committed to the dignity of every human being. Informed by this commitment, we seek to increase diversity in all of its forms, achieve fair outcomes, and model inclusion across our campus community. The University is committed to policies of affirmative action designed to increase the employment opportunities of individuals with disabilities and protected veterans in compliance with the Rehabilitation Act of 1973 and Vietnam Era Veterans' Readjustment Assistance Act of 1973.

J-18808-Ljbffr