DevSecOps Engineer

Draper; Cambridge (MA); On-site; USD 75,000 - 220,000; Full time

Job summary

Draper in Cambridge, MA is seeking a software engineer to design and operate secure, automated CI/CD pipelines for embedded and flight software systems. You will work with GitLab CI/CD, scripting, and cross-compilation to deliver reproducible builds in air-gapped environments.

You will collaborate with software, systems, and cybersecurity teams, enforcing policy-as-code and defense standards, including DO-178C and RMF. Expect hands-on work with Linux hardening, PKI/TLS, and SBOMs.

Qualifications

• Requires a bachelor's in Computer Science or related field.
• Master's degree preferred.
• Experience with software security practices (SAST/DAST/SCA) and DO-178C/NIST RMF guidance is a plus.

Responsibilities

• Independently execute task assignments under oversight from program leadership and senior staff.
• Design algorithms using modern theory and proven techniques, adhering to software best practices.
• Analyze designs to demonstrate performance and functionality.
• Develop and execute software tests to ensure compliance with requirements.
• Prepare technical data, procedures, reports, drawings, manuals, and other required documentation.
• Communicate with customers and stakeholders to establish requirements and describe deliverables.
• Identify challenges and risks and report them to project leadership.
• Drive solutions to complex problems with limited direction and contribute to requirements development.
• Provide insights to improve processes and applications based on data.

Skills

GitLab CI/CD

Python

Bash

C/C++

Cross-compilation

RTOS

Docker/Podman

Kubernetes

Terraform/Ansible

SBOMs/Software supply chain security

Education

Bachelor's in Computer Science or related field

Master's degree preferred

Tools

GitLab

Yocto/Buildroot

VxWorks/FreeRTOS/Zephyr

Job description

Overview:Draper is an independent, nonprofit research and development company headquartered in Cambridge, MA. The 2,000+ employees of Draper tackle important national challenges with a promise of delivering successful and usable solutions. From military defense and space exploration to biomedical engineering, lives often depend on the solutions we provide. Our multidisciplinary teams of engineers and scientists work in a collaborative environment that inspires the cross-fertilization of ideas necessary for true innovation. For more information about Draper, visit www.draper.com.Job Description Summary:Designs and operates secure, automated CI/CD pipelines using GitLab CI/CD for mission-critical embedded and flight software systems, enabling reproducible builds, integrated security controls, and compliant delivery in constrained and air-gapped environments. Partners with software, systems, and cybersecurity teams to standardize toolchains, enforce policy-as-code, and meet defense standards (e.g., DO-178C, NIST 800-53, RMF, STIGs). Requires proficiency in GitLab (pipelines, runners, package registry), scripting (Python, Bash), and systems languages (C/C++), along with experience in cross-compilation (GCC/Clang, Yocto, Buildroot), RTOS platforms (VxWorks, FreeRTOS, Zephyr), containerization (Docker/Podman), Kubernetes, infrastructure-as-code (Terraform, Ansible), and software supply chain security (SAST/DAST/SCA tools, SBOMs, artifact signing). Familiarity with Linux hardening, FIPS environments, PKI/TLS, and delivery to classified or disconnected systems is expected.Job Description:Duties/Responsibilities• Independently execute task assignments under the some oversight of program leadership and/or senior staff.• Designs algorithms using modern theory and proven techniques, adheres to software best practices.• Analyzes designs to demonstrate performance and functionality.• Develops and executes software tests to check compliance with requirements.• Prepares technical data, procedures, reports, drawings, manuals, and other required documentation.• Communicates with customers and stakeholders to establish requirements and describe the design and deliverables.• Identify challenges and risks associated with assigned tasks and communicate them to project leadership.• Drives solutions to complex problems with limited direction - contribute to requirements development, propose unique solutions, and adapt appropriately to changes in requirements.• Provides insight and suggest adaptations or modifications to processes and/or applications based on quantitative data or results.• Identifies project technical risks and mitigation strategies.Skills/Abilities• Curiosity-driven approach to solving complex, customer-driven problems as part of a multi-disciplinary team.• Demonstrate an ability to learn new programming languages and technologies quickly.• Collaborate and communicate effectively and openly with multi-disciplinary program team members, program leadership, and non-technical personnel.• A team player able to work in a fast-paced environment with the ability to balance multiple competing tasks and demands.EducationRequires a bachelor's in Computer Science or other related field. Master's degree is preferred.Experience3-5 years experience in Software Engineering or related field.Additional Job Description:Applicants selected for this position will be required to obtain and maintain a government security clearance. Secret Clearance is preferred.Connect With Draper for Future Opportunities! If you don't find the right posting in our Career Opportunities, you may submit your resume for future consideration.Job Location - City:CambridgeJob Location - State:MassachusettsJob Location - Postal Code:02139-3563The US base salary range for this full-time position is$75,000.00 - $220,000.00Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Union ranges will be in compliance with the collective bargaining agreement's approved rates by location and role. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the compensation details listed in US role postings reflect the base salary only, and does not include bonuses or benefits.Our work is very important to us, but so is our life outside of work. Draper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities. If this specific job opportunity and the chance to work at a nationally renowned R&D innovation company appeals to you, apply now www.draper.com/careers.Draper is committed to creating an inclusive environment. We understand the value of inclusivity and its impact on a high-performance culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, national origin, veteran status, or genetic information. Draper is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, please contact [e-mail].