Classified DevSecOps Architect & CI/CD Lead

UT-Battelle; Oak Ridge (TN); On-site; USD 110,000 - 180,000; Full time

Job summary

UT-Battelle’s Oak Ridge National Laboratory seeks an experienced DevSecOps Engineer/Architect to design, implement, automate, and sustain secure software and infrastructure delivery for classified missions.

You will work across software, infra, HPC, cybersecurity, IA, and mission teams to build secure, repeatable methods for building, testing, deploying, configuring, and sustaining systems and applications in restricted environments.

Qualifications

• BS degree or equivalent in a related technical field.
• Experience with DevOps/DevSecOps and automation.
• Strong Linux admin and scripting abilities.
• Experience building CI/CD pipelines and Git workflows.
• Infra automation and configuration management skills.
• Understanding of cybersecurity incl. hardening and secrets mgmt.
• Ability to automate repeatable processes with Python/Bash/PowerShell.
• Active TS, Q, or TS/SCI clearance required.

Responsibilities

• Design and implement secure DevSecOps architectures for classified apps and infra.
• Develop and maintain CI/CD pipelines integrating security validation and deployment.
• Create solutions for air-gapped, restricted-connectivity, and isolated environments.
• Automate software build, testing, artifact mgmt, security scans, release mgmt, and deployment.
• Integrate security controls throughout software and infrastructure lifecycles.
• Implement IaC and config-as-code to improve repeatability and recovery.
• Automate provisioning with Ansible, Terraform, Git-based workflows.
• Enforce automated compliance and validation in pipelines.
• Integrate vulnerability scanning, SCA, SAST, container scanning, secrets mgmt.
• Support secure container development, image signing, and registry mgmt.

Skills

DevSecOps experience

Linux administration

Scripting (Python, Bash, PowerShell)

CI/CD pipelines

Git-based workflows

Infrastructure automation

Security principles (hardening, least-

Education

BS in CS/CE/Cybersecurity or related field

Equivalent experience considered

Tools

Git

Ansible

Terraform

Docker

Kubernetes

Jenkins

GitLab CI/CD

Job description

UT-Battelle’s Oak Ridge National Laboratory seeks an experienced DevSecOps Engineer/Architect to design, implement, automate, and sustain secure software and infrastructure delivery for classified missions.

You will work across software, infra, HPC, cybersecurity, IA, and mission teams to build secure, repeatable methods for building, testing, deploying, configuring, and sustaining systems and applications in restricted environments.