DevSecOps Engineer - Secure CI/CD for Embedded Systems

Draper Labs; Cambridge (MA); On-site; USD 75,000 - 156,000; Full time

Job summary

Draper, a nonprofit research and development organization headquartered in Cambridge, MA, seeks a Software Engineer to design and operate secure CI/CD pipelines for mission‑critical embedded and flight software. You will work with software, systems, and cybersecurity teams to standardize toolchains, enforce policy as code, and meet defense standards such as DO-178C and RMF.

The role requires GitLab CI/CD proficiency, scripting in Python and Bash, and strong C/C++ skills, with experience in

Qualifications

• Requires a bachelor’s degree in Computer Science or related field; Master’s preferred.
• 3–5 years of software engineering experience.
• Ability to obtain and maintain a government security clearance; Secret clearance preferred.

Responsibilities

• Designs and operates secure, automated CI/CD pipelines for embedded and flight software.
• Partner with software, systems, and cybersecurity teams to standardize toolchains and policies.
• Develops and maintains scripts and build systems for cross‑platform environments.
• Ensures compliance with DO-178C, NIST 800‑53, RMF, and STIGs.
• Supports delivery to classified or disconnected systems where required.
• Contributes to requirements development and provides data‑driven process improvements.

Skills

Curiosity-driven problem solving

Learn new programming languages

Collaboration and communication

Education

Bachelor's in Computer Science or related field

Master's degree preferred

Tools

GitLab CI/CD

Python

Bash

C/C++

Yocto/Buildroot

Linux

Docker

Kubernetes

Terraform

Ansible

Job description

Draper, a nonprofit research and development organization headquartered in Cambridge, MA, seeks a Software Engineer to design and operate secure CI/CD pipelines for mission‑critical embedded and flight software. You will work with software, systems, and cybersecurity teams to standardize toolchains, enforce policy as code, and meet defense standards such as DO-178C and RMF.

The role requires GitLab CI/CD proficiency, scripting in Python and Bash, and strong C/C++ skills, with experience in