Lead DevSecOps Engineer

Sealing Technologies, a Parsons Company; Maryland; On-site; USD 140,000 - 170,000; Full time

Job summary

Sealing Technologies, a Parsons company, is seeking a DevSecOps Lead to build and harden our software delivery from the ground up. You’ll refine CI/CD pipelines, embed security gates, and establish a repeatable release process for air-gapped environments.

The ideal candidate owns ambiguity, sets priorities, and moves quickly, with 8+ years in DevOps/SRE, strong container and VM skills, and a proven track record delivering secure, reproducible software in fast-moving teams.

Qualifications

• 8+ years in DevOps, SRE, or infrastructure engineering.
• Proven track record building pipelines or platforms in fast-moving environments.
• Expert-level GitHub Actions and GitLab CI/CD with security scanning (SAST/DAST/SCA).
• Deep Docker/Podman, Nexus, and RPM packaging experience.
• Strong VMware ESXi admin including GPU management.
• Advanced Linux admin (RHEL/Rocky), networks, IPMI/iDRAC.
• Experience designing offline/disconnected deployments.
• Bachelor's degree in Engineering/CS/IT; equivalent experience.

Responsibilities

• Design and own end-to-end CI/CD pipeline as core delivery-risk control surface, embedding SAST/DAST/SCA gates and enforcing release policy.
• Manage Nexus artifact repositories as the trusted source of truth; scrutinize stages for compromise or failure points.
• Own packaging, signing, and validation for deployment into offline/air-gapped networks, including distribution integrity and system integration and certification.
• Build and operate GPU/hardware lab infrastructure for AI/ML testing, provisioning, workload optimization, and capacity planning.
• Drive the move to infrastructure-as-code, reproducible builds, and operational maturity; set reliability/security/compliance standards.

Skills

GitHub Actions & GitLab CI/CD

Containerization

RPM packaging

Artifact management

VMware ESXi

Linux administration

IPMI/iDRAC

GPU/AI infra

Offline deployment

SRE/DevOps leadership

Education

Bachelor's degree in Engineering/CS/IT

Tools

Nexus

Docker/Podman

Ansible

Terraform

osbuild/osbuild-composer

lorax

Invicti

Job description

Sealing Technologies, a Parsons company, innovates and delivers high-performance deployable anywhere technologies that push what's possible at the edge, enabling organizations across the globe to solve complex challenges with speed and confidence. We design, engineer, and deliver products and deployable technologies built for environments where traditional infrastructure falls short.

Position Overview:

SealingTech is looking for a DevSecOps Lead to improve our software delivery function from the ground up. This is a builder's role for someone who thrives with a phased approach on working with existing tech and introducing new technologies. You will refine the CI/CD pipeline and security gates, establish the release process, and create the operational discipline that turns a fast-moving engineering team into a reliable delivery organization.

We're looking for someone to own the process, treating every stage of the pipeline as a place where risk must be identified, contained, and engineered out. You will architect delivery so that what leaves our pipeline is secure, reproducible, and trustworthy. The right person is an independently motivated self-starter who owns ambiguity, sets their own priorities, and moves fast without waiting for a playbook.

Duties and Responsibilities:

• Design and own the end-to-end CI/CD pipeline as the core delivery-risk control surface, embedding SAST/DAST/SCA/SBOM gates and enforcing release policy.
• Manage Nexus artifact repositories as the trusted source of truth; scrutinize every stage for compromise or failure points.
• Own packaging, signing, and validation for deployment into a customer’s offline/air-gapped network, including distribution integrity and system integration and certification.
• Build and operate GPU/hardware lab infrastructure for AI/ML testing, provisioning, workload optimization, and capacity planning.
• Drive the move to infrastructure-as-code, reproducible builds, and operational maturity, partnering with engineering on the infra roadmap and setting reliability/security/compliance standards.

Minimum Qualifications:

• 8+ years of DevOps, SRE, or infrastructure engineering, including ownership of a CI/CD pipeline as a delivery-risk control surface
• A track record of building something from little or nothing (a pipeline, platform, practice, or program), ideally in a startup or similarly fast-moving, low-structure environment
• Expert-level GitHub Actions, GitLab pipelines and CI/CD architecture, with hands‑on security scanning integration (SAST/DAST/SCA)
• Deep proficiency with containers (Docker/Podman), artifact management (Nexus or equivalent), and RPM packaging for Linux distributions
• Strong VMware/ESXi administration including GPU resource management and configuration
• Advanced Linux system administration (RHEL/Rocky), networking, firewall management, and out-of-band systems (IPMI/iDRAC)
• Hands‑on experience with GPU infrastructure and AI/ML inference workload management
• Experience designing software delivery for offline, disconnected, or restricted-network deployment scenarios
• Self-directed and comfortable with ambiguity, able to set priorities, decide, and move quickly without a predefined playbook
• Bachelor's degree in Engineering, Computer Science, Information Technology, or related field; equivalent experience will be considered.

Preferred Qualifications:

• Delivery or SRE experience at a SaaS or product software company, with a strong point of view on pipeline risk mitigation
• Experience applying DISA STIG/NIST compliance frameworks
• Understanding of SBOM and supply‑chain security practices (Trivy, etc)
• Invicti or similar DAST platform integration and policy management
• Image assembly and OS build tools (osbuild, osbuild-composer, lorax)
• Infrastructure-as-code platforms (Ansible, Terraform)
• Multi-GPU systems, GPU clustering, or large-scale inference optimization