DevSecOps Engineer

Job Description:

Our San Diego team is seeking a DevSecOps Engineer to help secure and improve software delivery across the enterprise. This role focuses on embedding security, quality, compliance, and software supply-chain controls into CI/CD workflows while partnering with software development, cybersecurity, platform engineering, systems engineering, and program teams.

This is an engineering role, not a pure governance or vulnerability-management position. The DevSecOps Engineer will work across Azure DevOps Server (or equivalent technologies), Nexus, SonarQube, Kubernetes/K3s deployment workflows, artifact controls, and secure release patterns to help teams deliver software securely and reliably.

Occasional after-hours/weekend maintenance and emergency response may be required.

Key Responsibilities:

Secure CI/CD & Release Workflows

• Design, implement, and improve secure CI/CD patterns, including reusable YAML templates, quality gates, artifact controls, and release safeguards
• Support secure release workflows across development, test, integration, staging, and production environments
• Troubleshoot pipeline failures, permissions issues, dependency problems, scan failures, and release blockers

Software Supply Chain & Security Controls

• Integrate security and quality checks into build and release workflows, including SAST, SCA, dependency scanning, secrets scanning, code-quality gates, container scanning, and artifact validation
• Support tools such as Nexus, SonarQube, Azure DevOps artifacts, and related code-quality or artifact-management platforms
• Partner with cybersecurity to align CI/CD controls with SSP, RMF, NIST, CMMC, STIG, Zero Trust, audit, and program requirements

Kubernetes Guardrails & Developer Enablement

• Partner with platform engineering on secure Kubernetes/K3s deployment standards, including namespaces, RBAC, ServiceAccounts, Helm, ingress, TLS, storage, quotas, and workload security
• Create documentation, examples, runbooks, and onboarding materials for secure pipeline and deployment workflows
• Track recurring developer pain points, pipeline health, scan outcomes, release blockers, and control gaps; turn findings into automation, templates, documentation, or improved guardrails

Required Qualifications:

• 5+ years of experience in DevOps, DevSecOps, platform engineering, software delivery, systems engineering, or a closely related technical role
• Hands-on experience with CI/CD pipelines, YAML, build/release workflows, repositories, artifacts, permissions, or agent-based builds
• Experience implementing security, quality, or compliance controls in CI/CD workflows
• Experience with secure software delivery practices such as SAST, SCA, dependency scanning, secrets handling, code-quality gates, artifact controls, or container scanning
• Experience troubleshooting CI/CD failures, build issues, deployment problems, permissions issues, or dependency-related errors
• Experience with Kubernetes, K3s, containers, Helm, or similar deployment technologies
• Experience with scripting or automation using PowerShell, Bash, Python, or similar languages
• Ability to write clear technical documentation, runbooks, onboarding guides, and troubleshooting procedures
• Active U.S. Secret Clearance and eligible for TS/SCI Clearance 
• Willing and able to work in regulated, secure, or compliance-bounded environments

Preferred Qualifications:

• Active U.S. TS/SCI Security Clearance
• Experience with Azure DevOps Server
• Experience integrating or administering Nexus, SonarQube, or similar artifact and code-quality platforms
• Experience with SBOM generation, SCA, container scanning, artifact signing, provenance, or software supply-chain security
• Experience with policy-as-code, OPA/Gatekeeper, Kubernetes admission controls, or secure workload policies
• Experience with Infrastructure-as-Code or Configuration-as-Code practices using Terraform, Ansible, Bicep, CloudFormation, or similar tools
• Experience with AWS Cloud environment management
• Experience with Prometheus, Grafana, Loki, or similar observability platforms
• Experience in defense contracting, government programs, CMMC, NIST 800-171, RMF, STIGs, or other compliance-driven environments

Position Location: San Diego, CA (the selected individual will be expected to work on a government site at Naval Base Point Loma)

Perks and Benefits

• Medical, Dental and Vision Insurance
• Accompanying FSA and HSA options
• Additional Voluntary Benefits 
• Paid Time Off 
• 9 Observed Holidays and 2 Floating Holidays 
• Paid Parental Leave 
• Military Leave
• Tuition Reimbursement
• Professional Development Reimbursement
• Annual Salary Reviews 
• Profit Sharing 
• 401(k) Traditional and Roth Options 
• Gym and Fitness Reimbursement 
• Employee Assistance Program 
• Employee Referral Program