DevSecOps Engineer - VA

Connected-Logistics; Huntsville (AL); On-site; USD 135,000 - 145,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) plan

Paid Time Off

Job summary

Connected Logistics is seeking a DevSecOps Engineer to join our platform engineering team supporting VA CAIO. You will build and operate AKS-based infrastructure, CI/CD pipelines, and containerization workflows to enable AI/ML deployments and secure software delivery.

You will own reusable workflow libraries, IaC patterns in Pulumi TypeScript, and multi-tenant platform operations while continuously improving security, observability, and compliance across federal environments.

Qualifications

• BS degree with 7+ years of experience.
• U.S. Citizen for VA clearance.
• Strong communication and customer-facing skills.
• Ability to document system design and automation.

Responsibilities

• Author and maintain reusable GitHub Actions workflows.
• Build and run CI/CD pipelines for Azure environments.
• Deploy and manage AKS clusters and Istio routing.
• Containerize tenant apps and manage registries.
• Implement security scanning and SBOMs in CI pipelines.
• Automate multi-tenant onboarding and RBAC.
• Produce system and automation documentation.

Skills

GitHub Actions CI/CD

Containerization

Security tooling (SAST/SCA/Trivy)

Kubernetes multi-tenant platform ops

Pulumi IaC (TypeScript)

Education

BS degree

Tools

Pulumi (TypeScript)

Istio

Terraform

Job description

Connected Logistics is seeking a DevSecOps Engineer to join a platform engineering team supporting the Department of Veterans Affairs Chief AI Office (CAIO), building and operating the cloud infrastructure, CI/CD pipelines, and containerization workflows that support AI/ML and software delivery for pilot programs. The platform runs on Azure Kubernetes Service (AKS), automated via GitHub Actions reusable workflows, with infrastructure-as-code being stood up in Pulumi (TypeScript). You'll own key parts of the lifecycle — from reusable workflow libraries and container build/scan pipelines to multi-tenant AKS platform operations and federal security compliance.

What You'll Get to Do as a DevSecOps Engineer

• Author and maintain a reusable GitHub Actions workflow library consumed by tenant application repositories to build, scan, sign, and deploy.
• Build and execute CI/CD pipelines that deploy a self-service platform into customer Azure environments; help establish and expand Pulumi (TypeScript) IaC patterns from the current baseline.
• Deploy and maintain cloud platform infrastructure: AKS clusters, load balancers, node pools, NSGs, and Istio service mesh routing.
• Containerize tenant applications using multi-stage Docker builds and deploy them to AKS through automated pipelines.
• Integrate and maintain a security scanning pipeline using Semgrep (SAST), Grype/Snyk (SCA), and Trivy (container image scanning), plus SBOM generation and image signing (Cosign/Sigstore), enforcing quality gates in all CI workflows.
• Automate multi-tenant platform onboarding: namespace provisioning, RBAC role bindings, and virtual service creation via scripted workflows.
• Manage container image registries (GHCR or equivalent), versioning, and release automation (e.g., Release Please, Dependabot).
• Help stand up and maintain observability infrastructure for platform and AI/ML workloads.
• Support the AI/ML platform stack (models running on Kubernetes; Azure AI Foundry and Azure ML Workspaces as the platform matures).
• Collaborate with software engineers to containerize their applications for production deployment.
• Follow DevSecOps best practices for security integration, IaC, SRE, and operational visibility.
• Produce lightweight but useful documentation of systems, infrastructure, and automation mechanisms.

Requirements

• Must be a U.S. Citizen to obtain VA clearance.
• BS degree with 7+ years of experience
• Independent, with a mindset toward continuous learning, drive for self-study, and resourcefulness
• Strong communication skills and a customer-facing level of polish
• Able to produce lightweight but useful documentation of system design and automation mechanisms

Core experience (5+ years across the following):

• GitHub Actions CI/CD, including reusable workflow authorship (primary requirement)
• Container image build (multi-stage Dockerfiles), scanning, and registry management (GHCR or equivalent), including versioning and release automation
• Security scanning toolchain: SAST (Semgrep or equivalent), SCA (Grype/Snyk/equivalent), container vulnerability scanning (Trivy or equivalent); SBOM generation and image signing (Cosign/Sigstore) a plus
• Federal application security: OWASP, Zero Trust principles, encryption at rest and in transit, FISMA High controls; handling of PII/PHI in cloud environments

Required technology domains (production experience):

• Multi-tenant Kubernetes platform operations
• Infrastructure-as-code (Terraform or Pulumi). Pulumi with TypeScript strongly preferred. The team is actively standing this up, so the ability to establish and mature Pulumi patterns from a discovery baseline is valued more than prior years in Pulumi specifically.
• Istio service mesh: VirtualService/Gateway configuration, mTLS, and multi-tenant routing (familiarity required; hands-on multi-tenant routing a strong plus)

Preferred Qualifications:

• Prior work on a VA, DoD, or other federal FISMA High system with ATO experience
• GPU node pool provisioning and AI/ML workload scheduling on Kubernetes
• Familiarity with Python (FastAPI) and Node.js/React containerization patterns
• Experience standing up observability/monitoring and logging for cloud platforms

Total Rewards Statement:

We believe in fairness and clarity throughout our hiring process. The anticipated salary range for this position is $135,000 to $145,000 USD. This is a good-faith range based on factors such as your experience, geographic location, and any applicable contractual requirements, and may vary slightly. Beyond salary, we provide a robust benefits package and encourage ongoing professional development, because your growth and well-being matter to us. We’re excited to support you in building a rewarding career with us!

Connected Logistics respects the need for confidentiality for all applicants.

Connected Logistics has been named a 2026 WTOP Top Workplace in the medium sized business category. Our mission is clear: we deliver mission-focused IT, cybersecurity, logistics, and enterprise modernization support to federal agencies. When we invest in our people and create an environment where they feel valued and empowered, we deliver stronger outcomes for our clients and the missions we support.

Connected Logistics offers an excellent benefits package that includes health, dental, vision, life, and disability insurance, a great 401(k) package, and generous Paid Time Off.