DevSecOps Engineer

Darwin Recruitment; California (MO); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, dental and vision paid by the

Relocation support

401k matching

Holiday pay

Leave

Job summary

Darwin Recruitment seeks a DevSecOps Engineer in Los Angeles, onsite, with relocation support. You will own the software supply chain from commits to signed deployments in a hardened AWS GovCloud environment.

Role emphasizes GitLab administration, CI/CD pipelines, container image security, and IaC. You will implement security across the lifecycle and mentor teammates while collaborating with security and platform teams.

Qualifications

• Degree in computer science, information technology or similar field, or equivalent practical experience.
• Five or more years in a DevSecOps/DevOps/SRE role.
• Hands on AWS experience, ideally including GovCloud.
• Significant GitLab administration experience.
• Strong knowledge of building, securing and managing container images and workflows.
• Proficiency with IaC tools (CloudFormation, CDK, Terraform, Helm).
• US person, eligible for DoD Top Secret clearance; sponsorship available.

Responsibilities

• Administer GitLab and CI/CD platform, including runners, project/group structure, pipelines and security features.
• Build, maintain and optimise pipelines inside GovCloud air-gapped network.
• Own packaging and self-service deployment via AWS Service Catalog.
• Build, scan and publish OCI images to Amazon ECR with cross-account distribution.
• Integrate security tooling across the SDLC: SAST, DAST, SCA, secrets scanning and SBOM generation.
• Work within a zero-trust, air-gapped network with platform and security teams.
• Support evidence collection and continuous monitoring aligned to NIST 800-171/800-53.
• Automate provisioning, configuration management and pipeline security using IaC.
• Support and mentor other engineers on DevSecOps practices.

Skills

GitLab administration

CI/CD pipelines

AWS GovCloud

Container image security

Infrastructure as Code

Security tooling

Zero trust / air-gapped networks

NIST 800-171/800-53

Mentoring engineers

DoD security clearance sponsorship

Education

Degree in CS/IT or equivalent

Tools

GitLab

AWS

AWS GovCloud

Terraform / CloudFormation / Helm

Kubernetes

Job description

DevSecOps Engineer

Los Angeles, California | Full time, onsite | Relocation supported

The role

You will own the software supply chain that delivers the company's products into a hardened AWS GovCloud environment. This is the link between product engineering and the cloud platform, from a developer commit through automated build, test and security scanning, to a signed and packaged product ready for deployment.

• Administer GitLab and the CI/CD platform, covering runner fleets, project and group structure, pipeline configuration and application level security features
• Build, maintain and optimise pipelines that operate inside a constrained, air gapped GovCloud network
• Own product packaging and the self service deployment path through AWS Service Catalog, so engineering teams can provision approved infrastructure safely and repeatably
• Build, scan and publish OCI container images to Amazon ECR, including cross account distribution
• Integrate security tooling across the development lifecycle: SAST, DAST, SCA, secrets scanning and SBOM generation
• Work within a self hosted zero trust architecture and air gapped network controls alongside the platform and network security teams
• Support evidence collection and continuous monitoring for systems aligned to NIST 800-171 and 800-53
• Automate provisioning, configuration management and pipeline level security monitoring using Infrastructure as Code
• Support and mentor other engineers on DevSecOps practice and tooling

What you need

• Degree in computer science, information technology or a similar field, or equivalent practical experience
• Five or more years in a DevSecOps, DevOps or Site Reliability Engineering role
• Hands on AWS experience, ideally including service level work in AWS GovCloud
• Significant hands on GitLab administration, covering pipeline configuration, runner management and security features
• Strong knowledge of building, securing and managing container images and workflows
• Proficiency with Infrastructure as Code such as CloudFormation, CDK, Terraform or Helm
• US person, willing and eligible to obtain a DoD Top Secret security clearance. You do not need to hold one already, as sponsorship is available

Nice to have

• AWS Service Catalog or Landing Zone Accelerator
• Python scripting, with Go or PowerShell an advantage
• Experience in regulated environments building auditable, evidence generating pipelines such as SBOMs, scan reports and signing or provenance
• Familiarity with NIST 800-171 or 800-53
• Certifications such as AWS Security Specialty, CISSP or GitLab Certified Associate
• Advanced degree in a relevant technical field

What is on offer

Medical, dental and vision paid by the company for the employee, flexible vacation, 401k matching, holiday pay, and pregnancy, family and military service leave. Interview travel and relocation are covered. Full ownership of the pipeline in a team small enough that your work is visible at company level, with a fast, decisive interview process.