DevOps Engineer

FLOW-3D; Chapel Hill (NC); On-site; USD 110,000 - 150,000; Full time

Job summary

Flow Science, Inc. in Chapel Hill, NC is seeking an in-person DevOps Engineer to own the build, release, and security infrastructure for a diverse product suite.

You will architect and evolve the CI/CD pipeline, pushing from CI to full delivery with automated superbuilds, installers, and testing reports for customers. The role is solo with significant autonomy across FORTRAN CFD solvers, C++/Qt interfaces, C applications, and supporting libraries.

Qualifications

• Fluent in building FORTRAN/C++ projects with complex dependencies and Qt apps, proficient in CMake.
• GitLab CI/CD and Docker; know when Kubernetes adds value.
• Configured SAST/SCA tools and translated findings into developer guidance.
• Managed third-party C++/FORTRAN dependencies from source for reproducible builds.
• Release engineering and automated installers for cross-platform environments.
• Infrastructure as Code; versioned configs for runners, registries and artifacts.
• HPC context; compiler toolchains and cross-platform needs.

Responsibilities

• Extend GitLab CI to fully automated continuous delivery workflows including multi-product superbuilds.
• Own and evolve SAST, SCA, and SBOM tooling as living systems for secure software supply chain.
• Implement robust artifact management for binaries, installers, containers and dependencies across platforms.
• Evaluate build infrastructure to improve parallelization and resource utilization.
• Create automated testing frameworks and generate quality and security posture reports for customers.

Skills

GitLab CI/CD

Docker

CMake

Build Automation

Security Tooling

Dependency Management

Release Engineering

Infrastructure as Code

Fortran

C++

Tools

Kubernetes

Job description

This is an in-person position in Chapel Hill, NC.

The Role

Flow Science is looking for a DevOps Engineer who can take ownership of the build, release, and security infrastructure for our diverse product suite to architect our CI/CD pipeline evolution, extending our current GitLab-based system from continuous integration into full continuous delivery complete with automated superbuilds, installer creation, and comprehensive testing reports for customer delivery. If you believe infrastructure should be elegant, builds should be reproducible, and security should be proactive rather than reactive, we want to talk to you.

This is a solo role with significant autonomy and impact. You’ll work with seven distinct products spanning FORTRAN CFD solvers, C++/Qt graphical interfaces, C applications, and supporting libraries. You will be the expert who transforms our build system from good to exceptional, while ensuring security is baked into every step.

What you'll do

• Build Pipeline Evolution: Extend our GitLab CI system to support fully automated continuous delivery workflows, including orchestrated superbuilds across our multi-product ecosystem and automated installer generation for Windows and multiple Linux distributions.
• Security Infrastructure: Own and evolve our SAST, SCA, and SBOM tooling as living systems that provide actionable insights to development teams and guide the organization on secure software supply chain practices and vulnerability management.
• Artifact & Release Management: Implement robust artifact management solutions to handle compiled binaries, installers, container images, and dependencies across our product portfolio. Manage third-party package builds and updates, ensuring our external dependencies stay current and secure across all supported platforms.
• Infrastructure Optimization: Evaluate and implement build infrastructure to improve parallelization and resource utilization while balancing sophistication with maintainability.
• Testing & Reporting: Create automated testing frameworks and generate quality and security posture reports suitable for external customer consumption.

What you should know

• Multi-language Build Systems: You understand the nuances of building FORTRAN/C++ projects with complex dependencies, Qt applications, .NET solutions, and are fluent in CMake. You know how to orchestrate builds across different ecosystems and have managed third-party dependencies, including building them from source, to ensure security and compatibility across your supported platforms.
• GitLab CI/CD & Containerization: You’re fluent in GitLab pipeline design and Docker, and you understand when Kubernetes adds value versus complexity. You’ve made these architectural decisions before and can explain the tradeoffs clearly.
• Application Security Tooling: You’ve configured and maintained SAST/SCA tools, understand how to tune them to reduce false positives, and can translate security findings into actionable guidance for developers. You know what an SBOM is and why it matters.
• Package & Dependency Management: You’ve built and maintained third-party C++ and FORTRAN dependencies from source, managed version compatibility across a complex software stack, and understand how to create reproducible builds. Whether it’s ensuring Qt, MPI, or numerical libraries build consistently across Windows and multiple Linux distributions, you know that dependency management is where build systems succeed or fail.
• Release Engineering: You’ve created automated installers and managed software distribution and understand that scientific and engineering desktop applications have different requirements than web services.
• Infrastructure as Code: You approach infrastructure problems programmatically. Whether managing GitLab runners, container registries, or artifact repositories, you believe configuration should be versioned and reproducible.
• Scientific Computing Context: While we don’t expect you to understand computational fluid dynamics, you appreciate that HPC and engineering software has unique requirements around compiler toolchains, numerical libraries, and cross-platform compatibility.