DevSecOps Platform Engineer: Azure/K8s

Logc2; United States, Northern America, Americas; Hybrid; USD 135,000 - 145,000; Full time

Job summary

Connected Logistics is seeking a DevSecOps Engineer to join a platform engineering team supporting the VA Chief AI Office, building and operating cloud infrastructure, CI/CD pipelines, and container workflows for AI/ML delivery in Azure AKS.

You will own reusable GitHub Actions workflows and Pulumi TypeScript IaC, deploy multi-tenant AKS clusters, and enforce security scanning across the pipeline with SBOM generation and image signing.

Qualifications

• 7+ years of experience in DevSecOps or platform engineering.
• U.S. Citizen for VA clearance.
• Strong communication and documentation skills.
• Ability to produce lightweight documentation of systems and automation mechanisms

Responsibilities

• Author and maintain reusable GitHub Actions workflow library for tenant apps.
• Build and execute CI/CD pipelines for Azure environments and expand Pulumi IaC patterns.
• Deploy and maintain AKS clusters, load balancers, node pools, and Istio routing.
• Containerize tenant applications and deploy to AKS via pipelines.
• Maintain security toolchain: Semgrep, Grype/Snyk, Trivy; SBOM and image signing.
• Automate multi-tenant onboarding and RBAC provisioning.
• Manage registries and release automation.
• Help stand up observability for platform and AI/ML workloads.
• Collaborate with engineers on containerization and deployment.
• Follow DevSecOps best practices and produce documentation

Skills

GitHub Actions CI/CD

Container image build & registry mgmt

Security scanning toolchain

Federal security/compliance

Education

BS degree

Tools

Pulumi

Terraform

Istio

Job description

Connected Logistics is seeking a DevSecOps Engineer to join a platform engineering team supporting the VA Chief AI Office, building and operating cloud infrastructure, CI/CD pipelines, and container workflows for AI/ML delivery in Azure AKS.

You will own reusable GitHub Actions workflows and Pulumi TypeScript IaC, deploy multi-tenant AKS clusters, and enforce security scanning across the pipeline with SBOM generation and image signing.