DevSecOps /Platform Engineer

Tangram Flex; Dayton (OH); On-site; USD 108,000 - 132,000; Full time

Benefits offered by this job

Hybrid work options

Flexible working hours

10 paid holidays

Paid time off

Employer medical, dental, vision

Disability insurance

Life insurance

Health Savings Account

401K with employer match

Tech community events

Job summary

Tangram Flex is seeking a DevSecOps / Platform Engineer with 3+ years of experience to support software development teams by applying DevSecOps best practices in a team-based setting. You will build, manage, and optimize CI/CD pipelines using cloud-native tech to support internal and external customers.

Responsibilities include integrating automated security controls across networks, accelerating cATO processes, and delivering infrastructure with Terraform, Kubernetes, and GitOps workflows.

Qualifications

• Bachelor’s degree in Computer Science, IT, or Cybersecurity.
• 3+ years in software deployment, DevOps, or DevSecOps engineering.
• U.S. Citizenship required; must possess or be able to obtain and maintain a U.S. Government Security Clearance.
• Willingness and ability to travel up to 20% of work time to client sites, locations, and conferences.

Responsibilities

• Collaborate with software engineers to continuously improve the software delivery workflow.
• Create, manage, and optimize CI/CD pipelines using GitLab CI or alternative platforms.
• Implement and maintain GitOps workflows with FluxCD or ArgoCD to manage cluster state.
• Troubleshoot and repair code automation pipelines to fix build or deployment failures.
• Apply IaC practices (Terraform) to manage cloud infrastructure and air-gapped environments.

Skills

AWS

Kubernetes

Docker

Linux/Bash scripting

GitLab CI/CD

Education

Bachelor's degree in Computer Science, IT, Cybersecurity

Tools

FluxCD

ArgoCD

Terraform

Prometheus

Grafana

Job description

Tangram Flex is seeking a DevSecOps / Platform Engineer with 3+ years of experience to provide direct support to our software development teams by leveraging DevSecOps best practices in a team-based environment. In this role, you will use Cloud-Native technologies to build, manage, and optimize CI/CD pipelines and application build environments that support both internal and external customers.

Candidates should possess a solid technical skillset to work closely with software engineers to refine delivery workflows, integrate automated security controls across classified and unclassified networks, and help accelerate Continuous Authority to Operate (cATO) processes.

What We Do:

Our team and products provide solutions to enable innovators to design, develop, verify, and advance critical systems, while accelerating innovation that advances our nation's security. By accelerating delivery of critical systems, Tangram is transforming the way our nation solves complex software challenges.

JOB RESPONSIBILITIES

Pipeline Architecture & Software Delivery

• Work alongside software engineers to continuously improve the software delivery workflow.
• Create, manage, and optimize CI/CD pipelines using GitLab CI or alternative deployment platforms.
• Implement and maintain GitOps workflows using FluxCD or ArgoCD to manage cluster state.
• Triage and repair code automation pipelines promptly when build or deployment failures occur.
• Identify and implement opportunities for pipeline caching and performance improvements to shorten build cycles.
• Deliver engineering and IT services using Cloud-Native technologies, AWS GovCloud, and Kubernetes.
• Apply Infrastructure-as-Code (IaC) paradigms (e.g., Terraform) to manage cloud infrastructure and air-gapped environments.
• Containerize applications with common tools, such as Docker, and deploy using Kubernetes and Helm.
• Support deployments across multiple security enclaves (NIPRNet, SIPRNet, JWICS, C2S/SC2S).

Continuous Security & Compliance

• Integrate container and dependency scanning tools into CI/CD pipelines to catch vulnerabilities early.
• Enforce DoD Cyber Security directives, STIGs, and NIST SP 800-53 controls to support cATO initiatives.
• Leverage DoD Enterprise DevSecOps models (such as Platform One or Big Bang) and hardened container repositories (Iron Bank).

Observability & Platform Operations

• Configure observability and monitoring tools (such as Prometheus and Grafana) to proactively identify system issues and performance degradation.
• Evaluate and recommend new tools to continuously adopt and improve Infrastructure Team workflows.
• Create and execute backup, restore, and disaster-recovery plans for core services and platforms.

REQUIRED SKILLS & QUALIFICATIONS

• Education: Bachelor’s degree in Computer Science, IT, Cybersecurity
• Experience: 3+ years of software deployment, software engineering, DevOps, or DevSecOps engineering.
• Clearance: U.S. Citizenship required; must possess or have the ability to obtain and maintain a U.S. Government Security Clearance.
• Willingness and ability to travel up to 20% of work time to client sites, customer locations, and industry conferences
• Core Technical & Software Development Skills:
• Demonstrated proficiency with AWS (Fences) or other cloud services, Kubernetes, Docker, and Linux/Bash scripting.
• Hands-on experience with GitLab CI/CD or alternative CI/CD frameworks.
• Ability to Travel up to 20%

NICE TO HAVE SKILLS & QUALIFICATIONS

• Ability to work flexible hours when supporting deployment windows or operational mission needs.
• DoD Ecosystem: Experience with Air Force Platform One, Iron Bank hardened containers, and AWS C2S/SC2S cloud environments.
• DoD 8570/8140 Compliance: Active IAT Level II or IAM Level II certification (e.g., Security+ CE, CySA+, CISSP).
• Working knowledge of Infrastructure-as-Code paradigms.
• Familiarity with container/dependency scanning tools (e.g., Anchore, Trivy, SonarQube).
• Experience with Prometheus, Grafana, GitLab, and Okta.
• Local to Dayton, Ohio or surrounding areas

WHAT WE OFFER

We are committed to staying rooted in our core value of Team First. For that reason, we've designed a highly competitive benefits program and supportive work environment to engage employees and their families.

• Hybrid work options
• Flexible Working Hours, 10 paid holidays, and generous Paid Time Off
• Employer Paid Medical, Dental, Vision and Short and Long Term Disability Insurance
• Access to group rating plans for Life Insurance
• Employer contribution to Health Savings Account
• Competitive 401K employer match
• A vibrant engineering culture that fosters transparency, collaboration, and continuous professional growth via internal tech community events (Lightning Talks, Integration Events).

Tangram Flex is an Equal Opportunity Employer, and provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in its application procedures and in accordance with federal law. All qualified candidates will receive consideration for employment based on business needs, job requirements, and individual qualifications.

EEO/AA Vet/Disabled Employer/ and E-Verify