DevSecOps Engineer

KBR Careers; Lexington (MA); Hybrid; USD 127,000 - 190,000; Full time

Job summary

KBR is actively seeking a DevSecOps Engineer to contribute to design, development, implementation, and testing of software for large-scale communications demonstrations at MIT Lincoln Laboratory in Lexington, MA. A hybrid work location is possible.

The role requires a Secret clearance, 5–10 years in software development or related fields, and deep expertise in containerization, CI/CD, security tooling, and cloud/hybrid platforms.

Qualifications

• Secret clearance required.
• Bachelor’s in CS/CE/EE or related field.
• 5–10 years in software development, systems engineering, platform engineering, or DevOps.
• Expert containerization: Podman, Docker, Kaniko, Skopeo; UBIs; k3s/k8s.
• Expert GitLab CI/CD: building and optimizing pipelines.
• Security scans: Trivy, Semgrep, Gemnasium; SBOM-based scans.

Responsibilities

• Serve as the DevSecOps SME and architectural authority.
• Define standards and reference architectures across teams.
• Design secure, scalable cloud and hybrid platforms.
• Embed security into CI/CD pipelines and deployment workflows.
• Lead container platforms (Docker, Kubernetes, OpenShift).
• Integrate IAM, secrets management, and encryption into pipelines.
• Troubleshoot complex system, pipeline, and security issues.
• Mentor engineers and elevate DevSecOps maturity.
• Lead technical reviews and risk discussions.
• Communicate risk and recommendations to leadership.

Skills

CI/CD pipelines

Containerization

Kubernetes

Security tools

Red Hat Linux

Java/Python/Node

Secret clearance

Education

Bachelor's degree in CS/CE/EE

Tools

Podman

Docker

Kaniko

Skopeo

Job description

Title: DevSecOps Engineer

Belong. Connect. Grow. with KBR!

KBR provides innovative and cost-effective services and solutions to national security and industry customers. We are leading the way for national security and commercial space integration, developing innovative solutions to tomorrow's challenges today.

This position supports the Strategic and Long-Range Communications Group at MIT Lincoln Laboratory. We are seeking a DevSecOps Engineer to contribute to the design, development, implementation, and testing of software for a series of large-scale communications system demonstrations. Work will be performed in a disciplined collaborative environment, employing modern programming practices. A hybrid work location possible for this position.

These services shall be provided in support of several Laboratory and Government test sites.

Why Join Us?

• Innovative Projects: Enable critically important communications over vast distances by being the team member to innovate and overcome technical challenges as we spearhead new solutions through advanced prototyping.
• Collaborative Environment: Come join a team of enthusiastic engineers engaged in creating the next generation of cutting‑edge laser communication systems technology.
• Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense and/or defense.

Key Responsibilities

• Serve as the DevSecOps subject-matter expert and architectural authority
• Define standards, reference architectures, and best practices used across teams
• Design and implement secure, scalable, and highly available cloud and hybrid platforms
• Embed security controls directly into: CI/CD pipelines Architecture‑as‑code Container platforms and deployment workflows
• Evaluate, select, and integrate DevSecOps tooling, including SAST, DAST, SCA Secrets management, encryption, and identity integration Container security
• Lead implementation of containerized platforms (Docker, Kubernetes, OpenShift, etc.)
• Integrate identity access management, secrets management, and encryption into pipelines and platforms
• Troubleshoot complex system, pipeline, and security issues across environments
• Act as a trusted technical advisor to engineering, security, and platform teams
• Mentor engineers and elevate DevSecOps maturity across the organization
• Lead technical reviews, architecture discussions, and root cause analyses
• Communicate risk, tradeoffs, and recommendations clearly to technical and non-technical leadership
• Actively maintain security vulnerability assessment databases for third‑party application dependency scans and operating system level scans
• Actively monitor GitLab Security Dashboards for new vulnerabilities detected in software products and work with developers to remediate
• Maintain and enforce compliance frameworks across projects
• Maintain the software release pipeline
• Ensure base container images are regularly updated to include latest security patches and updates

Work Environment

Location: On-site at MIT LL in Lexington, MA. Hybrid possible. Travel Requirements: Willing and able to travel (up to 10%, typically CONUS) Working Hours: Standard.

Required Qualifications

• Security Clearance: Secret
• Education: Bachelors in Computer Science, Computer Engineering, Electrical Engineering, or related field
• Work Experience: 5 to 10 years of experience in software development, systems engineering, platform engineering, or DevOps roles
• Containerization Technologies: Expert level experience building container images with Podman, Docker, Kaniko, Skopeo. Familiarization with Universal Base Images (UBI). Familiarization with k3s and k8s desired.
• GitLab CI/CD: Expert-level experience building and optimizing build pipelines. To include use of CI templates or CI components.
• Security Integration: Proficiency in implementing security scan execution policies and pipeline security scans. Familiar with Trivy, Semgrep, and Gemnasium (or other SBOM based dependency scans).
• Software Proficiency: Expert-level experience with package managers for Java, Python and Node.
• Operating Systems: Proficient with Red Hat Enterprise Linux 8.10 or higher.

Compensation

Basic Compensation: For MA only, the salary range is approximately $126,900 - $190,400 USD annually. The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

Company Culture

Belong, Connect and Grow at KBR At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together. KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law. KBR — Delivering Solutions, Changing the World. KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives. In everything we do, we are guided by our ONE KBR Values: We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential. We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders. We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business. We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed. We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company. We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals. Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries. At KBR, We Deliver.