Senior Staff / Senior DevSecOps Engineer

SciTec, a wholly owned subsidiary of Firefly Aerospace, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions.

Important Notice: SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. SciTec cannot sponsor or assume sponsorship of employee work visas of any type. Further, U.S. citizenship is a requirement to obtain and keep a security clearance. Applicants that do not meet these requirements will not be considered.

We are seeking a Senior Staff / Senior DevSecOps Engineer to design, develop, and sustain high-quality CI/CD pipelines, containerize applications, and deploy cloud-based platforms. This role focuses on distributed systems, microservices, and real-time data pipelines, working closely with scientific and technical users in a mission-focused environment.

The ideal candidate is a strong individual contributor with deep Configuration as Code (CaC), Infrastructure as Code (IaC), and Kubernetes expertise ready to make a real impact and solve complex challenges with passion.

Key Responsibilities

• Design, maintain, and improve CI pipelines (GitLab CI) for secure software builds and deployments
• Orchestrate automated deployments across development, test, and production environments using Kubernetes and Helm
• Ability to perform tasks well aligned with team and product goals with limited technical oversight and guidance.
• Provide thought leadership, mentorship, and input into tasks for projects
• Integrate CI pipelines with tools for artifact management, testing, code quality, and security scanning
• Monitor and troubleshoot CI/CD pipeline performance and deployment issues
• Manage software release processes including version promotion, branching, integration, and validation
• Maintain and implement Helm charts for application deployments
• Perform deployment validation and issue resolution in Kubernetes-based environments
• Ensure adherence to cybersecurity protocols and secure coding practices
• Support software vulnerability scanning (Static & Dynamic Analysis Tools) and remediation processes
• Perform other DevSecOps-related duties as assigned

Requirements

The following minimum qualifications are required for the position:

• Bachelor’s degree in Information Technology, Computer Science, or related technical field
• 5+ years of DevOps engineering, system administration and infrastructure management
• Container orchestration with tools such as Docker, Kubernetes, Kustomize, or Helm
• 2+ years of experience with Infrastructure as Code tooling (Terraform, CloudFormation, Ansible, etc.)
• Proven ability to automate complex workflows and processes
• Design systems to maximize ability to audit and observe
• Demonstrated ability to collaborate effectively across technical disciplines
• Strong attention to detail and commitment to high-quality, well-tested code
• Excellent verbal and written communication skills
• Professional experience working in Linux environments
• Experience using version control systems such as Git
• Ability to obtain and maintain a DoD security clearance

Candidates who have any of the following skills will be preferred:

• Advanced degree (e.g., Masters, PhD) in Computer Science or Engineering
• Advanced Security Credentials: Active IAT Level III certification (e.g., CISSP, CASP+, or SecurityX).
• Linux systems administration
• Container security tools (e.g., Grype, Syft)
• SAST/SCA tools (e.g., Fortify, SonarQube, Snyk, Trivy, ZAP)
• AWS (EKS, EC2, Lambda)
• Application networking with tools such as Istio, NGINX, or Traefik
• Monitoring and observability tools (e.g., Prometheus, Grafana)
• Authentication tools (e.g., Keycloak)
• Artifact repositories (e.g., JFrog Artifactory, Nexus)
• Additional programming experience with strongly typed languages such as C++ or Rust
• Familiarity with secure software development and vulnerability management workflows
• Experience supporting RMF processes, ATO activities, or DISA STIG application
• Active DoD Top Secret security clearance

*Resumes, Cover Letters, and Applications which are generated by AI will not be considered for employ