DevSecOps Engineer III

Blue Origin; Denver, Huntsville, Seattle, Reston (CO, AL, WA, VA); Sur place; USD 151 000 - 211 000; Plein temps

Avantages offerts par ce poste

Medical, dental, vision

401(k) with company match

Paid time off

Résumé du poste

Blue Origin seeks a DevSecOps Engineer III to own GitLab CI/CD pipelines for flight software, ensure reproducible builds, and produce SBOMs and provenance across multiple sites including Denver, Huntsville, Seattle area, and Reston.

You will collaborate with flight software, SRE, and security teams to harden build environments, align with DoD Software Factory practices, and mentor junior engineers while supporting classified and offline environments.

Qualifications

• 5+ years of professional experience in DevOps/DevSecOps or build and release engineering.
• Experience designing and operating GitLab CI/CD pipelines and runners.
• Experience generating SBOMs and securing software supply chains.

Responsabilités

• Design, build, and operate GitLab CI/CD pipelines for flight software, including analysis and testing stages.
• Own the secure build system with reproducible builds and signed artifacts.
• Generate SBOMs and provenance for releases and run vulnerability scans.
• Build pipelines for classified, closed, and offline environments.
• Define CI/CD standards, partner with SRE and flight software teams, and mentor junior engineers.

Connaissances

GitLab CI/CD

Linux administration

Python scripting

Bash scripting

Security fundamentals

Formation

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Aerospace Engineering, or related STEM field

Outils

Docker

Podman

SBOM tooling

Description du poste

DevSecOps Engineer III### DevSecOps Engineer IIIApply: Denver, CO: Huntsville, AL: Greater Seattle Area: Reston, VA: Full time: Posted Today: R74923Application close date:Applications will be accepted on an ongoing basis until the requisition is closed.At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight! This role is part of Blue National Security (BNS), where our focus is the design, development, and delivery of launch and spacecraft systems for national security missions. Through Blue Ring, our all-in-one, high-powered hybrid solar-electric and chemical-propelled spacecraft, we provide unmatched mission maneuverability, versatility, and capacity at dramatically lower-profile costs.Flight software is only as trustworthy as the system that builds, tests, and delivers it. Behind every Blue Ring flight software release is a build and automation pipeline that has to be secure, reproducible, and auditable, including in classified, closed, and offline environments where the usual cloud tooling isn't available. As the DevSecOps engineer for the flight software team, you will be the expert on how we build and automate that infrastructure. You'll design and run the GitLab CI/CD pipelines, harden the build environments, and produce the supply-chain evidence, such as SBOMs and signed artifacts, that customers and accreditors expect. Your work removes friction for every developer on the team and raises the confidence we have in every release. As a DevSecOps Engineer III, you'll be the go-to expert for how our flight software is built and automated: you'll own the CI/CD pipelines and secure build systems end to end, and set the practices the rest of the team builds on. **Special Mentions*** Relocation provided* Travel expected up to 15% of the time* Interviews will include a technical assessment* Active clearance is highly desired but not required. (TS/SCI with CI poly or upgradable to it) **Responsibilities include but are not limited to:*** Design, build, and operate GitLab CI/CD pipelines for flight software, covering build, static analysis, unit, software-in-the-loop (SIL), and hardware-in-the-loop (HIL) stages, plus artifact promotion and release* Own the secure build system, including reproducible builds, hardened minimal base images, pinned and verified dependencies, and signed artifacts* Generate, validate, and retain SBOMs and provenance for every release, and run vulnerability and license scanning with findings driven to closure* Build and sustain pipelines in classified, closed, and offline environments, including mirrored registries and package repositories, offline update paths, and artifact transfer across domains* Align pipelines with DoD Software Factory practices and the security controls our customers and accreditors require, producing compliance evidence as a by-product of the build* Define CI/CD standards and best practices, such as branching, merge gating, runner management, and caching, and automate manual build, test, and release steps- Partner with flight software developers, test engineers, and systems security to turn security and process requirements into automated pipeline checks* Partner with Site Reliability Engineering (SRE) to secure compute, storage, and network resources, resolve cross-boundary issues, and represent the team's infrastructure needs* Mentor and peer-coach Level I and II engineers* Support integration, test campaigns, and release readiness activities as needed**Minimum Qualifications*** Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Aerospace Engineering, or a related STEM field* 5+ years of professional experience in DevOps, DevSecOps, or build and release engineering, ideally for software in secure or regulated environments* Hands-on experience designing and operating GitLab CI/CD pipelines, including runners, shared templates, and pipeline-as-code- Experience building and securing OCI container environments (Docker and Podman) for software builds, including hardening images and managing container registries* Experience generating, validating, and consuming software bills of materials (SBOMs) and securing the software supply chain* Strong experience administering and securing Linux systems, and scripting skills (e.g., Python and Bash)* Experience with Git version control* Must be a U.S. citizen or national, U.S. permanent resident (current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.**Preferred Qualifications*** Experience with minimal, hardened container images and secure base-image supply chains (e.g., Chainguard)* Experience with DoD Software Factory practices or reference platforms (e.g., Platform One, Iron Bank), or equivalent DevSecOps reference designs* Experience building, deploying, and sustaining software pipelines in classified, closed, or air-gapped (offline) environments, including mirrored registries and package repositories* Experience with artifact signing, provenance, and attestation (e.g., Sigstore/cosign, SLSA), and with vulnerability and license scanning in CI* Experience with build systems and dependency management for C/C++ and embedded toolchains (e.g., CMake, Bazel, or Yocto)* Experience with infrastructure as code and configuration management (e.g., Terraform or Ansible)* Familiarity with security and compliance frameworks such as NIST SP 800-53, the Risk Management Framework (RMF), or NIST SSDF* Experience supporting flight or embedded software development pipelines, including software-in-the-loop (SIL) or hardware-in-the-loop (HIL) testing in CI* Master's degree in a related field* Active TS/SCI clearance### Base Pay Range for:VA applicants is $164,652.00 - $230,512.80CO applicants is $150,931.00 - $211,303.05WA applicants is $164,652.00 - $230,512.80**Other site ranges may differ** **Culture Statement**Don’t meet all desired requirements? Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin, we are dedicated to building an authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every desired qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles. **Export Control Regulations**Applicants for employment at Blue Origin must be a U.S. citizen or national, U.S. permanent resident (i.e. current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. **Background Check*** Required for all positions: Blue’s Standard Background Check* Required for Certain Job Profiles: Defense Biometric Identification System (DBIDS) background check if at any time the role requires one to be on a military installation* Required for Certain Job Profiles: Drivers who operate Commercial Motor Vehicles with a Gross Vehicle Weight (GVW), Gross Vehicle Weight Rating (GVWR) or combination of power unit and trailer that meets or exceeds 10,001 lbs. and/or transports placardable amounts of hazardous materials by ground in any vehicle on a public road while in commerce, may be subject to additional Federal Motor Carrier Safety Regulations including: Driver Qualification Files, Medical Certification (obtained before onboarding), Road Test, Hours of Service, Drug and Alcohol Testing, vehicle inspection requirements, CDL requirements (if applicable) and hazardous materials transportation/shipping training.* Required for certain Job Profiles: Ability to obtain and maintain Merchant Mariner Credential, which includes pre-employment and random drug testing as well as DOT physical **Benefits*** Benefits include: Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long-term disability, 401(k) with a company match of up to 5%, and an Education Support Program.* Stock Options for all regular employees (working at least 20 hours/week)* Paid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.* Dependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details.