DevSecOps Engineer (TS/SCI Clearance or Eligibility Required)

CNF Technologies; San Antonio (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

CNF Technologies in San Antonio is seeking a DevSecOps Engineer to design and maintain ephemeral test automation ranges in secure environments, enabling automated pipelines across virtualization and cloud platforms.

This role focuses on building ephemeral compute stacks, reusable CI/CD components, and custom workflows to accelerate mission software development and validation.

Qualifications

• Active TS/SCI clearance or ability to obtain and maintain one.
• 5+ years in DevOps, systems engineering, or infrastructure automation.
• Hands-on with GitOps & CI/CD tools (GitLabCI, Jenkins).
• Experience with IaC tools: Terraform, Ansible; Image building: Packer (Linux/Windows).
• Virtualization: Libvirt, QEMU, AWS, Azure; Scripting: Python, Bash, PowerShell.

Responsibilities

• Design, implement, and manage GitOps CI/CD workflows using GitLabCI and reusable pipelines.
• Develop IaC solutions with Terraform, Ansible, and Packer for Linux and Windows.
• Build and maintain ephemeral test environments on AWS, Azure, and local virtualization stacks.
• Create Python, Bash, and PowerShell scripts to support test automation and integration.
• Prototype MVP solutions rapidly and evolve disposable code into reusable modules.
• Deploy and configure temporary or experimental compute stacks in non-production labs.
• Support file analysis and data fixture management for testing and forensics.
• Collaborate with developers to gather requirements and deliver automation solutions.
• Apply Agile practices and ensure SecOps and code hygiene.

Skills

GitOps

CI/CD

Python

Bash

PowerShell

Terraform

Ansible

Packer

QEMU

Libvirt

AWS

Azure

Jenkins

AGILE/SCRUM

SecOps

Tools

GitLabCI

Jenkins

Terraform

Ansible

Packer

Libvirt

QEMU

AWS

Azure

Job description

DevSecOps Engineer (TS/SCI Clearance or Eligibility Required)

Location: San Antonio, TX Clearance: Active Top Secret / SCI (or ability to obtain and maintain) Employment Type: Full-Time – On-site

Position Overview

Seeking a DevSecOps Engineer to design, develop, and maintain on-demand *ephemeral test automation ranges* in secure environments. This position will support U.S. Air Force and related defense missions by enabling automated test and development pipelines across a variety of virtualization and cloud platforms. The role requires adaptability, rapid prototyping, and strong DevSecOps practices to deliver innovative solutions within highly regulated environments.

This is not a traditional enterprise cloud application engineering role. Instead, the engineer will focus on building test automation environments, **ephemeral compute stacks**, reusable CI/CD components, and custom workflows to accelerate mission software development and validation.

Responsibilities

• Design, implement, and manage GitOps CI/CD workflows leveraging GitLabCI and reusable pipeline components.
• Develop Infrastructure as Code (IaC) solutions using Terraform, Ansible, and Packer (or similar image-building tools) for both Linux and Windows platforms.
• Build and maintain ephemeral test environments on AWS, Azure, and local Linux virtualization stacks (Libvirt, QEMU).
• Develop and maintain Python, Bash, and PowerShell scripts to support test automation, prototyping, and system integration.
• Rapidly prototype MVP solutions to meet evolving mission requirements, with the ability to refine disposable code into reusable, production-ready modules.
• Deploy and configure temporary or experimental compute stacks in non-production test environments, including some networking setup/configuration.
• Support file analysis and novel file type handling for test automation, forensic evaluation, and data fixture management.
• Collaborate closely with system/software developers to gather requirements and deliver tailored automation solutions.
• Apply AGILE development practices and ensure strict adherence to SecOps and code hygiene standards.
• Safely operate across networks of varying classifications, following mandatory data transfer processes and security guidelines.

Required Qualifications

• Active TS/SCI clearance, or the ability to obtain and maintain one.
• 5+ years of experience in DevOps, Systems Engineering, or Infrastructure Automation.
• Hands-on experience with:
  • GitOps & CI/CD tools (GitLabCI, Jenkins)
  • IaC tools: Terraform, Ansible
  • Image building: Packer or equivalent for Linux and Windows automation
  • Virtualization platforms: Libvirt, QEMU, AWS, Azure
  • Scripting: Python, Bash, PowerShell
• Strong ability to prototype solutions quickly and evolve them into modular, reusable systems.
• Experience with ephemeral environments, automated range deployments, or test infrastructure.
• Excellent communication skills for gathering requirements and interfacing with developer teams.
• Familiarity with Agile/Scrum methodologies and secure coding practices.

Preferred Qualifications

• Familiarity with Kubernetes and container orchestration (beneficial but not required).
• Knowledge of file forensics, data transformation, and test data management in automation contexts.
• Experience working in defense or classified environments with adherence to RMF/ATO and related compliance standards.
• Knowledge of emerging technologies including Large Language Model, Machine Learning and Research and Development to support rapid development and prototyping.