DevSecOps Engineer - Junior
DESE Research, Inc.
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
DESE Research, Inc. seeks a DevSecOps Engineer to update, secure, and sustain the development infra for the Cyber Works Division. You will manage on-prem servers, storage, networking, and Azure resources, while building containerized services and CI/CD improvements.
You will collaborate with engineers and leadership to improve availability, security, and developer experience, including upgrades, automation, and incident response.
Qualifications
- Bachelor's degree in CS/Engineering or related field.
- Hands-on Linux-based development infrastructure admin experience.
- Experience operating on-premises servers, storage, networking, and supporting infra services.
- Experience building container images and deploying containerized apps/services.
- Experience with Docker Compose, Kubernetes or similar.
- Experience automating infrastructure with Ansible.
- Experience with Git-based workflows and GitLab.
- Experience implementing observability and centralized logging.
- Knowledge of networking, IAM, reverse proxies, TLS, backups, recovery.
- Ability to diagnose complex issues across hardware, OS, networks, storage, containers.
- Ability to plan infrastructure changes with documentation and risk management.
- Ability to work independently while collaborating with developers and stakeholders.
- Active Secret security clearance or ability to obtain one.
Responsibilities
- Administer, update, secure, and troubleshoot Ubuntu Linux servers and dev services.
- Operate and maintain GitLab and Runners, including access, upgrades, backups, and health.
- Deploy and sustain containerized services using Docker/Kubernetes.
- Automate infrastructure configuration with Ansible.
- Implement observability using Prometheus, Loki, Promtail, Grafana.
- Manage Keycloak and Nginx services, including identity integration and SSL.
- Administer on-prem infrastructure: hardware, storage, TrueNAS, backups.
- Configure, monitor, and troubleshoot RAID, networking, and components.
- Manage Azure resources for development teams with security/cost focus.
- Support AI development infra (vLLM, OpenCode) when needed.
- Monitor health, outages, root-cause analysis, and corrective actions.
- Maintain diagrams, docs, inventories, and recovery procedures.
- Collaborate to plan upgrades and onboard services; remove blockers.
- Support secure software delivery, vulnerability remediation, secrets handling, compliance.
- Maintain and improve CI/CD pipelines and build automation.
Skills
Education
Tools
Job description
DESE Research, Inc. is seeking a DevSecOps Engineer to update, operate, secure, and sustain the development infrastructure used by the Cyber Works Division. This role enables DESE employees and subcontractor teammates to develop and deliver Cyber Science & Technology solutions to the warfighter. The position emphasizes reliable development platforms, on-premises systems, observability, containerized services, networking, storage, and cloud resources. CI/CD pipeline support and development is also an important part of the overall mission.
The DevSecOps Engineer will support the full lifecycle of the division's development infrastructure, from physical servers and storage through operating systems, platform services, container workloads, monitoring, identity, networking, and Microsoft Azure resources. The engineer will maintain a dependable and secure environment for approximately 20-30 developers, including DESE employees and subcontractors.
The successful candidate will combine hands-on systems administration with infrastructure automation and practical troubleshooting. This person will work closely with software engineers, cyber researchers, systems engineers, and technical leadership to improve availability, repeatability, security, capacity, and developer experience. Responsibilities may include planned upgrades, incident response, hardware replacement, deployment automation, documentation, and CI/CD enhancement work.
- Administer, update, secure, and troubleshoot Ubuntu Linux servers and development services supporting Cyber Works Division projects.
- Operate and maintain GitLab and GitLab Runners, including access, upgrades, runner capacity, integrations, backups, and routine platform health.
- Deploy and sustain containerized services by building container images and using Docker Compose or Kubernetes, as appropriate for the environment.
- Automate repeatable infrastructure configuration, deployment, patching, and operational tasks with Ansible and supporting scripts.
- Implement and maintain observability using Prometheus, Loki, Promtail, and Grafana, including dashboards, log collection, alerting, capacity visibility, and service health monitoring.
- Operate supporting platform services such as Keycloak and Nginx, including identity integration, reverse proxy configuration, certificate management, and secure service exposure.
- Administer on-premises infrastructure, including server hardware, operating systems, firmware, storage, TrueNAS, backups, and recovery procedures.
- Configure, deploy, monitor, and troubleshoot RAID volumes; replace or install server components when required; and coordinate maintenance to minimize disruption.
- Manage networking equipment and connectivity for development systems, including configuration, segmentation, addressing, troubleshooting, and documentation.
- Manage Microsoft Azure resources used by development teams, with attention to access control, security reliability, cost awareness, and lifecycle management.
- Support infrastructure for AI-assisted development and model-serving workloads, including vLLM and OpenCode, when required by project needs.
- Monitor infrastructure health and capacity, respond to outages and degraded performance, perform root-cause analysis, and implement corrective actions.
- Maintain system diagrams, configuration records, operational procedures, inventories, recovery documentation, and knowledge-sharing materials.
- Collaborate with developers and project teams to evaluate infrastructure needs, plan upgrades, onboard services, and remove technical blockers.
- Support secure software delivery practices, vulnerability remediation, secrets handling, configuration management, and compliance with applicable customer and organizational requirements.
- Maintain and improve CI/CD pipelines and build automation where needed, while prioritizing the broader reliability and sustainment of the development environment.
- Bachelor's degree in Computer Science, Computer Engineering, Software Engineering, Information Systems, Cybersecurity, or a related technical discipline, or equivalent relevant experience.
- Hands-on experience administering Linux-based development infrastructure, preferably Ubuntu Linux, in a multi-user engineering environment.
- Experience operating and troubleshooting on-premises servers, storage, networking, and supporting infrastructure services.
- Experience building container images and deploying containerized applications or services.
- Experience with Docker Compose, Kubernetes, or a comparable container orchestration approach.
- Experience automating infrastructure configuration or operational tasks with Ansible or a comparable infrastructure automation tool.
- Experience with Git-based development workflows and a source-code management platform such as GitLab.
- Experience implementing or supporting infrastructure monitoring, centralized logging, dashboards, and alerting.
- Working knowledge of networking, identity and access management, reverse proxies, TLS certificates, system hardening, backups, and recovery.
- Ability to diagnose complex issues across hardware, operating systems, networks, storage, containers, and application services.
- Ability to plan and execute infrastructure changes with clear documentation, effective communication, and appropriate risk management.
- Ability to work independently while collaborating with developers, subcontractors, technical leadership, and customer stakeholders.
- Active Secret security clearance or the ability to obtain and maintain one.
Ubuntu Linux; GitLab; GitLab Runners; Microsoft Azure
Ansible; container image builds; Docker Compose; Kubernetes
Prometheus; Loki; Promtail; Grafana
Keycloak; Nginx
TrueNAS; RAID; on-premises servers; networking equipment
vLLM; OpenCode
For the past 44 years, DESE has provided industry-leading technical and engineering solutions in the fields of Defense, Energy, Space, and Environment. As a small, family-oriented business, DESE provides a compelling benefits package including a generous profit-sharing plan, competitive salaries, and perhaps most importantly, the opportunity to work alongside talented engineers leveraging cutting-edge technologies to solve complex and engaging problems.
At DESE, we are committed to creating a company that is known for its respect and care for employees. We understand that happy employees are what keeps our business going, and we strive to provide the best opportunities for each individual working on our team. Benefits include:
- Competitive health, dental, and vision insurance with affordable premiums
- Flexible work schedules
- Two flexible spending account options
- Company-paid life insurance with options for employee-paid additional coverage
- Performance bonus program
- Education reimbursement program
- Company-paid personal leave for approved philanthropic activities
- Vacation, sick, and holiday leave
- Robust 401(k) profit-sharing plan
- Opportunities for internal promotions
- Employee referral incentive program
- Rewards and gifts for service anniversaries
DESE Research, Inc. is an Equal Employment Opportunity employer and provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in its job application procedures. If you have any difficulty using our online system and need an accommodation due to a disability, you may contact us at hrandsecurity@dese.com or 256-837-8004 x123.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
