Senior DevSecOps Engineer - Secure CI/CD & Cloud-Native

LMI; Colorado Springs (CO); On-site; USD 122,000 - 200,000; Full time

Job summary

LMI in Colorado Springs seeks a Senior DevSecOps Engineer to advance secure software delivery, release engineering, and deployment platforms across Linux, Windows, and macOS.

You will design and maintain GitLab CI/CD pipelines for TypeScript/JavaScript, Python, and Rust apps, integrate security checks, and partner with engineering and security teams to default to secure and reliable delivery throughout the lifecycle.

Qualifications

• Bachelor's degree in CS/engineering or related field.
• Extensive DevOps/DevSecOps experience and GitLab CI/CD expertise.
• Experience building and securing containers, OCI images, and artifact repos.
• Strong Linux, scripting, and cross-team collaboration.

Responsibilities

• Design and maintain reusable GitLab CI/CD pipelines.
• Integrate automated testing, code-quality checks, and security scanning.
• Build secure workflows for scanning, signing, and publishing containers and packages.
• Develop cross-platform release processes including packaging and versioning.
• Deploy and operate Kubernetes workloads across on-prem, Azure, and AWS.
• Maintain vulnerability management and remediation across systems.
• Improve pipeline reliability and developer self-service.
• Partner with engineering to strengthen security without slowing delivery.

Skills

DevSecOps

GitLab CI/CD

Linux

Shell scripting

Cloud: AWS

Kubernetes

Security scanning

OCI containers

Artifact repositories

Quality gates

Education

Bachelor's degree in CS/engineering

Tools

SonarQube

Vitest

Playwright

Cypress

pytest

Cargo

Trivy

Sonatype Nexus

KICS

Docker

Kubernetes

AWS

Azure

Job description

LMI in Colorado Springs seeks a Senior DevSecOps Engineer to advance secure software delivery, release engineering, and deployment platforms across Linux, Windows, and macOS.

You will design and maintain GitLab CI/CD pipelines for TypeScript/JavaScript, Python, and Rust apps, integrate security checks, and partner with engineering and security teams to default to secure and reliable delivery throughout the lifecycle.