Lead DevSecOps Engineer

Sealing Technologies, a Parsons Company; Maryland; On-site; USD 150,000 - 210,000; Full time

Job summary

Sealing Technologies, a Parsons company, is seeking a DevSecOps Lead to design and own the end-to-end CI/CD pipeline, integrating security gates and release processes for a fast-moving engineering team.

You will manage Nexus and artifacts, package and sign deployments for air-gapped environments, and build GPU/AI lab infra while advancing infrastructure-as-code and reliability standards.

Qualifications

• 8+ years in DevOps, SRE, or infrastructure engineering with CI/CD ownership.
• Experience building pipelines or platforms in fast-moving environments.
• Expert-level CI/CD tooling and security gate integrations.

Responsibilities

• Design and own end-to-end CI/CD pipeline with SAST/DAST/SCA/SBOM gates.
• Manage Nexus artifact repositories as trusted source of truth.
• Packaging, signing, and validation for offline/air-gapped deployments.
• Build and operate GPU/hardware lab infra for AI/ML testing.
• Transition to infrastructure-as-code with reliable, secure standards.

Skills

CI/CD

DevSecOps

GitHub Actions

GitLab pipelines

Security scanning

Containers

Nexus

Linux

VMware/ESXi

GPU/AI infra

Education

Bachelor's degree in Engineering/CS/IT

Tools

Nexus

Trivy

Invicti/DAST

osbuild/osbuild-composer

lorax

Ansible

Terraform

Job description

Sealing Technologies, a Parsons company, innovates and delivers high-performance deployable anywhere technologies that push what's possible at the edge, enabling organizations across the globe to solve complex challenges with speed and confidence. We design, engineer, and deliver products and deployable technologies built for environments where traditional infrastructure falls short.

Position Overview:

SealingTech is looking for a DevSecOps Lead to improve our software delivery function from the ground up. This is a builder's role for someone who thrives with a phased approach on working with existing tech and introducing new technologies. You will refine the CI/CD pipeline and security gates, establish the release process, and create the operational discipline that turns a fast-moving engineering team into a reliable delivery organization.

We're looking for someone to own the process, treating every stage of the pipeline as a place where risk must be identified, contained, and engineered out. You will architect delivery so that what leaves our pipeline is secure, reproducible, and trustworthy. The right person is an independently motivated self-starter who owns ambiguity, sets their own priorities, and moves fast without waiting for a playbook.

Duties and Responsibilities:

• Design and own the end-to-end CI/CD pipeline as the core delivery-risk control surface, embedding SAST/DAST/SCA/SBOM gates and enforcing release policy.
• Manage Nexus artifact repositories as the trusted source of truth; scrutinize every stage for compromise or failure points.
• Own packaging, signing, and validation for deployment into a customer’s offline/air-gapped network, including distribution integrity and system integration and certification.
• Build and operate GPU/hardware lab infrastructure for AI/ML testing, provisioning, workload optimization, and capacity planning.
• Drive the move to infrastructure-as-code, reproducible builds, and operational maturity, partnering with engineering on the infra roadmap and setting reliability/security/compliance standards.

Minimum Qualifications:

• 8+ years of DevOps, SRE, or infrastructure engineering, including ownership of a CI/CD pipeline as a delivery-risk control surface
• A track record of building something from little or nothing (a pipeline, platform, practice, or program), ideally in a startup or similarly fast-moving, low-structure environment
• Expert-level GitHub Actions, GitLab pipelines and CI/CD architecture, with hands-on security scanning integration (SAST/DAST/SCA)
• Deep proficiency with containers (Docker/Podman), artifact management (Nexus or equivalent), and RPM packaging for Linux distributions
• Strong VMware/ESXi administration including GPU resource management and configuration
• Advanced Linux system administration (RHEL/Rocky), networking, firewall management, and out-of-band systems (IPMI/iDRAC)
• Hands-on experience with GPU infrastructure and AI/ML inference workload management
• Experience designing software delivery for offline, disconnected, or restricted-network deployment scenarios
• Self-directed and comfortable with ambiguity, able to set priorities, decide, and move quickly without a predefined playbook
• Bachelor's degree in Engineering, Computer Science, Information Technology, or related field; equivalent experience will be considered.

Preferred Qualifications:

• Delivery or SRE experience at a SaaS or product software company, with a strong point of view on pipeline risk mitigation
• Experience applying DISA STIG/NIST compliance frameworks
• Understanding of SBOM and supply-chain security practices (Trivy, etc)
• Invicti or similar DAST platform integration and policy management
• Image assembly and OS build tools (osbuild, osbuild-composer, lorax)
• Infrastructure-as-code platforms (Ansible, Terraform)
• Multi-GPU systems, GPU clustering, or large-scale inference optimization