DevSecOps Engineer

Darwin Recruitment; Los Angeles (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Relocation assistance

Medical, dental and vision coverage

401k matching

Interview travel covered

Relocation support

Job summary

Darwin Recruitment is seeking a DevSecOps Engineer for a spacecraft technology company in Los Angeles, onsite with relocation support. The role focuses on owning the software supply chain from commit to deployment within a hardened GovCloud environment.

You will administer GitLab CI/CD, build and optimize pipelines in an air-gapped network, manage container images, and integrate security across the development lifecycle, including SBOM generation and NIST-aligned controls.

Qualifications

• Five or more years in a DevSecOps, DevOps or SRE role.
• Hands on AWS experience, including GovCloud.
• Significant GitLab administration experience.
• Proficiency with Infrastructure as Code (CloudFormation, CDK, Terraform, Helm).
• US person eligible for DoD Top Secret clearance (sponsorship available).

Responsibilities

• Administer GitLab and the CI/CD platform, covering runner fleets and security features.
• Build and optimise pipelines in an air-gapped GovCloud network.
• Own packaging and self-service deployment via AWS Service Catalog.
• Build, scan and publish OCI container images to ECR with cross-account distribution.
• Integrate security tooling across the development lifecycle (SAST/DAST/SCA/SBOM).
• Work within a self-hosted zero trust architecture and air-gapped controls.
• Support evidence collection and monitoring aligned to NIST controls.
• Automate provisioning, configuration management and security monitoring with IaC.
• Mentor other engineers on DevSecOps practices.

Skills

AWS GovCloud

GitLab administration

CI/CD pipelines

Infrastructure as Code

Container security

SBOM generation

NIST 800-171

Zero trust

Security tooling

Education

Degree in computer science or IT, or equivalent experience

Tools

Terraform

CloudFormation

CDK

Helm

Go

PowerShell

Job description

DevSecOps Engineer

Los Angeles, California | Full time, onsite | Relocation supported

We are working with a spacecraft technology company in Los Angeles that designs and builds custom satellites for government and prime contractor customers. Small engineering team, funded, with hardware already flying. This is a hands on build and own role.

The role

You will own the software supply chain that delivers the company’s products into a hardened AWS GovCloud environment. This is the link between product engineering and the cloud platform, from a developer commit through automated build, test and security scanning, to a signed and packaged product ready for deployment.

• Administer GitLab and the CI/CD platform, covering runner fleets, project and group structure, pipeline configuration and application level security features
• Build, maintain and optimise pipelines that operate inside a constrained, air gapped GovCloud network
• Own product packaging and the self service deployment path through AWS Service Catalog, so engineering teams can provision approved infrastructure safely and repeatably
• Build, scan and publish OCI container images to Amazon ECR, including cross account distribution
• Integrate security tooling across the development lifecycle: SAST, DAST, SCA, secrets scanning and SBOM generation
• Work within a self hosted zero trust architecture and air gapped network controls alongside the platform and network security teams
• Support evidence collection and continuous monitoring for systems aligned to NIST 800-171 and 800-53
• Automate provisioning, configuration management and pipeline level security monitoring using Infrastructure as Code
• Support and mentor other engineers on DevSecOps practice and tooling

What you need

• Degree in computer science, information technology or a similar field, or equivalent practical experience
• Five or more years in a DevSecOps, DevOps or Site Reliability Engineering role
• Hands on AWS experience, ideally including service level work in AWS GovCloud
• Significant hands on GitLab administration, covering pipeline configuration, runner management and security features
• Strong knowledge of building, securing and managing container images and workflows
• Proficiency with Infrastructure as Code such as CloudFormation, CDK, Terraform or Helm
• US person, willing and eligible to obtain a DoD Top Secret security clearance. You do not need to hold one already, as sponsorship is available

Nice to have

• AWS Service Catalog or Landing Zone Accelerator
• Python scripting, with Go or PowerShell an advantage
• Experience in regulated environments building auditable, evidence generating pipelines such as SBOMs, scan reports and signing or provenance
• Familiarity with NIST 800-171 or 800-53
• Certifications such as AWS Security Specialty, CISSP or GitLab Certified Associate
• Advanced degree in a relevant technical field

What is on offer

Medical, dental and vision paid by the company for the employee, flexible vacation, 401k matching, holiday pay, and pregnancy, family and military service leave. Interview travel and relocation are covered. Full ownership of the pipeline in a team small enough that your work is visible at company level, with a fast, decisive interview process.