Lead DevSecOps Engineer

sealing-technologies-inc; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Retirement contributions

Education budgets & tuition reimburse

Flexible schedules

Company retreats & gatherings

Pet friendly offices

Job summary

Sealing Technologies is seeking a DevSecOps Lead to reshape our software delivery from the ground up. You will refine CI/CD, establish release processes, and build the operational discipline that turns a fast-moving engineering team into a reliable delivery organization.

Expect ownership of the end-to-end pipeline, secure and reproducible releases, and a strong emphasis on risk containment. A self-starter who thrives without a fixed playbook will fit our startup-like environment.

Qualifications

• US Citizenship required.
• 8+ years in DevOps, SRE, or infrastructure engineering with CI/CD ownership.
• Proven track record building pipelines, platforms, or programs in fast-moving environments.
• Expert-level GitHub Actions and GitLab pipelines with security scanning integration (SAST/DAST/SCA).
• Deep container experience (Docker/Podman), Nexus or equivalent, and RPM packaging for Linux.
• VMware/ESXi administration with GPU resource management.
• Advanced Linux admin (RHEL/Rocky), networking, firewalls, IPMI/iDRAC.
• GPU infra and AI/ML inference workload experience.
• Experience designing software delivery for offline, restricted-network deployments.
• Self-driven, prioritizes effectively in ambiguity.
• Bachelor’s in Engineering/CS/IT or related field; equivalent experience ok.

Responsibilities

• Design and own the end-to-end CI/CD pipeline with SAST/DAST/SCA/SBOM gates.
• Manage Nexus artifact repositories as trusted sources of truth.
• Package, sign, and validate deployments for offline/air-gapped networks.
• Build and operate GPU lab infrastructure for AI/ML testing and capacity planning.
• Drive infrastructure-as-code and reproducible builds with engineering on infra roadmap.

Skills

CI/CD pipeline ownership

Security scanning integration

Containers (Docker/Podman)

VMware/ESXi administration

Linux system administration

Offline/disconnected deployment design

Ambiguity tolerance

Education

Bachelor's degree in Engineering, Computer Science, Information Technology, or related field

Tools

GitHub Actions

GitLab pipelines

Nexus

osbuild

osbuild-composer

lorax

Ansible

Terraform

Job description

Location: Columbia, MD

Type: Hybrid

Travel: 10%

About Us

Sealing Technologies, a Parsons company, innovates and delivers high-performance deployable anywhere technologies that push what's possible at the edge, enabling organizations across the globe to solve complex challenges with speed and confidence. We design, engineer, and deliver products and deployable technologies built for environments where traditional infrastructure falls short.

Position Overview

SealingTech is looking for a DevSecOps Lead to improve our software delivery function from the ground up. This is a builder's role for someone who thrives with a phased approach on working with existing tech and introducing new technologies. You will refine the CI/CD pipeline and security gates, establish the release process, and create the operational discipline that turns a fast-moving engineering team into a reliable delivery organization.

We're looking for someone to own the process, treating every stage of the pipeline as a place where risk must be identified, contained, and engineered out. You will architect delivery so that what leaves our pipeline is secure, reproducible, and trustworthy. The right person is an independently motivated self-starter who owns ambiguity, sets their own priorities, and moves fast without waiting for a playbook.

Duties and Responsibilities

• Design and own the end-to-end CI/CD pipeline as the core delivery-risk control surface, embedding SAST/DAST/SCA/SBOM gates and enforcing release policy.
• Manage Nexus artifact repositories as the trusted source of truth; scrutinize every stage for compromise or failure points.
• Own packaging, signing, and validation for deployment into a customer’s offline/air-gapped network, including distribution integrity and system integration and certification.
• Build and operate GPU/hardware lab infrastructure for AI/ML testing, provisioning, workload optimization, and capacity planning.
• Drive the move to infrastructure-as-code, reproducible builds, and operational maturity, partnering with engineering on the infra roadmap and setting reliability/security/compliance standards.

Minimum Qualifications

• U.S. Citizenship
• 8+ years of DevOps, SRE, or infrastructure engineering, including ownership of a CI/CD pipeline as a delivery-risk control surface
• A track record of building something from little or nothing (a pipeline, platform, practice, or program), ideally in a startup or similarly fast-moving, low-structure environment
• Expert-level GitHub Actions, GitLab pipelines and CI/CD architecture, with hands-on security scanning integration (SAST/DAST/SCA)
• Deep proficiency with containers (Docker/Podman), artifact management (Nexus or equivalent), and RPM packaging for Linux distributions
• Strong VMware/ESXi administration including GPU resource management and configuration
• Advanced Linux system administration (RHEL/Rocky), networking, firewall management, and out-of-band systems (IPMI/iDRAC)
• Hands-on experience with GPU infrastructure and AI/ML inference workload management
• Experience designing software delivery for offline, disconnected, or restricted-network deployment scenarios
• Self-directed and comfortable with ambiguity, able to set priorities, decide, and move quickly without a predefined playbook
• Bachelor's degree in Engineering, Computer Science, Information Technology, or related field; equivalent experience will be considered.

Preferred Qualifications

• Delivery or SRE experience at a SaaS or product software company, with a strong point of view on pipeline risk mitigation
• Experience applying DISA STIG/NIST compliance frameworks
• Understanding of SBOM and supply-chain security practices (Trivy, etc)
• Invicti or similar DAST platform integration and policy management
• Image assembly and OS build tools (osbuild, osbuild-composer, lorax)
• Infrastructure-as-code platforms (Ansible, Terraform)
• Multi-GPU systems, GPU clustering, or large-scale inference optimization
• Government contracting or defense sector experience

Sealing Technologies is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status. Working is no longer solely about the job. Here at Sealing Tech, we understand your happiness and health is vital to our success. We are innovative in our approach to cultivating balanced work environments and offer a plethora of added perks. Sealing Tech offers competitive compensation packages, health, dental, and vision insurance, retirement contributions, continuing education budgets, tuition reimbursement, flexible schedules, and generous vacation policies. Other perks include complimentary snacks, drinks & monthly catered lunches, and company retreats and gatherings. Plus, flexible work arrangements, pet friendly offices and quarterly merit bonuses for qualified employees. We are looking for a new member to join our team, take on challenges, be innovative and willing to grow with us. BUILD, SECURE, SOLVE.