Senior DevSecOps Platform Engineer — Kubernetes & RMF

Defense Unicorns; Springfield (VA); Hybrid; CAD 212,000 - 286,000; Full time

Benefits offered by this job

Health insurance

HSA

Stock options

Home office budget

Flexible PTO

Parental leave

Conferences covered

Training reimbursement

Job summary

Defense Unicorns seeks a senior DevSecOps Engineer to embed with a government team, building secure, automated pipelines for cloud-native software, AI models, and agentic capabilities. This role emphasizes secure lifecycle automation, SBOM provenance, and policy-driven controls in a fast-moving, classified environment.

You will work with Kubernetes/OpenShift, Terraform/Pulumi, and GitLab CI/CD, translating NIST RMF requirements into practical engineering patterns and evidence for ATO readiness.

Qualifications

• Hands-on Kubernetes/OpenShift experience in cloud-native environments.
• Experience with secure CI/CD pipelines and GitOps practices.
• Strong knowledge of NIST SP 800-53 and RMF/ATO processes.

Responsibilities

• Design, implement, and improve secure CI/CD and GitOps pipelines.
• Automate secure build, test, deployment, and lifecycle workflows.
• Translate security requirements into practical engineering controls and evidence collection.
• Identify and remediate security risks early in the development lifecycle.
• Support end-to-end ATO/RMF lifecycle and remediation tracking.
• Develop IaC using Terraform, Pulumi, Ansible, etc.

Skills

Kubernetes

OpenShift

GitLab CI/CD

NIST SP 800-53

RMF/ATO

Terraform

Pulumi

Ansible

Python

Go

Bash

Security automation

SBOM/provenance

Tools

Red Hat OpenShift

Kubernetes manifests

GitOps

Job description

Defense Unicorns seeks a senior DevSecOps Engineer to embed with a government team, building secure, automated pipelines for cloud-native software, AI models, and agentic capabilities. This role emphasizes secure lifecycle automation, SBOM provenance, and policy-driven controls in a fast-moving, classified environment.

You will work with Kubernetes/OpenShift, Terraform/Pulumi, and GitLab CI/CD, translating NIST RMF requirements into practical engineering patterns and evidence for ATO readiness.