DevSecOps Engineer — Secure CI/CD for Embedded Systems

Draper; Cambridge (MA); On-site; USD 75,000 - 220,000; Full time

Job summary

Draper in Cambridge, MA is seeking a software engineer to design and operate secure, automated CI/CD pipelines for embedded and flight software systems. You will work with GitLab CI/CD, scripting, and cross-compilation to deliver reproducible builds in air-gapped environments.

You will collaborate with software, systems, and cybersecurity teams, enforcing policy-as-code and defense standards, including DO-178C and RMF. Expect hands-on work with Linux hardening, PKI/TLS, and SBOMs.

Qualifications

• Requires a bachelor's in Computer Science or related field.
• Master's degree preferred.
• Experience with software security practices (SAST/DAST/SCA) and DO-178C/NIST RMF guidance is a plus.

Responsibilities

• Independently execute task assignments under oversight from program leadership and senior staff.
• Design algorithms using modern theory and proven techniques, adhering to software best practices.
• Analyze designs to demonstrate performance and functionality.
• Develop and execute software tests to ensure compliance with requirements.
• Prepare technical data, procedures, reports, drawings, manuals, and other required documentation.
• Communicate with customers and stakeholders to establish requirements and describe deliverables.
• Identify challenges and risks and report them to project leadership.
• Drive solutions to complex problems with limited direction and contribute to requirements development.
• Provide insights to improve processes and applications based on data.

Skills

GitLab CI/CD

Python

Bash

C/C++

Cross-compilation

RTOS

Docker/Podman

Kubernetes

Terraform/Ansible

SBOMs/Software supply chain security

Education

Bachelor's in Computer Science or related field

Master's degree preferred

Tools

GitLab

Yocto/Buildroot

VxWorks/FreeRTOS/Zephyr

Job description

Draper in Cambridge, MA is seeking a software engineer to design and operate secure, automated CI/CD pipelines for embedded and flight software systems. You will work with GitLab CI/CD, scripting, and cross-compilation to deliver reproducible builds in air-gapped environments.

You will collaborate with software, systems, and cybersecurity teams, enforcing policy-as-code and defense standards, including DO-178C and RMF. Expect hands-on work with Linux hardening, PKI/TLS, and SBOMs.