Site Reliability Engineer / DevSecOps Engineer

OpenTeams; Washington, Denver, Colorado Springs (District of Columbia, CO, CO); Hybrid; USD 145,000 - 250,000; Full time

Benefits offered by this job

401(k) Match

Unlimited PTO

Fully Remote Setup

Continuous Education

Disability & Life Insurance

HSA & FSA Options

Job summary

OpenTeams in the Washington, DC area is hiring a SRE/DevSecOps Engineer to own the secure delivery pipeline for an AI/ML platform deployed in tightly controlled environments.

You will build versioned, signed releases with SBOMs, enforce vulnerability scanning, and ensure RMF-aligned evidence is produced automatically.

The role requires US citizenship and eligibility for a security clearance, travel up to 15%, and a hybrid/remote work setup with potential onsite in accredited facilities.

Qualifications

• U.S. citizenship and eligibility to obtain and maintain a U.S. security clearance.
• 6+ years of experience in DevSecOps, site reliability engineering, platform engineering, or production operations.
• 3+ years of experience supporting DoD, IC, or similarly regulated programs.
• Hands‑on experience packaging or promoting software into classified, air‑gapped, or limited-connectivity environments.
• Strong Kubernetes and cloud operations experience, including operating containerized production workloads in AWS.
• Working knowledge of DevSecOps practices for regulated environments, including hardened containers, image signing, SBOMs, vulnerability management, and continuous monitoring.
• Experience with Risk Management Framework or comparable security/compliance framework.
• Proficiency in scripting and automation using Python, Bash, Go, or similar.
• Experience with infrastructure‑as‑code and deployment tools such as Terraform, Helm, or equivalents.
• Experience implementing or operating production observability stacks and participating in incident response.
• Current DoD 8140/8570 qualifying certification (e.g., CISSP or CASP+) or ability to obtain within 90 days.
• Bachelor’s degree in computer science, engineering, or related field, or equivalent practical experience.

Responsibilities

• Build and operate the CI/CD pipeline that produces versioned, signed release packages with SBOM manifests, hardened container images, deployment runbooks, and validation procedures for each promotion gate
• Execute the recurring low-to-high promotion cadence through Government-approved transfer mechanisms, including cross-domain solution submission packages, and verify environment parity after each promotion
• Integrate vulnerability management, image signing, dependency scanning, and continuous monitoring into the pipeline so accreditation evidence is generated once and reused at each promotion
• Work with the program's security engineers to keep pipeline outputs aligned to the RMF body of evidence
• Define and track service level objectives, and build monitoring, logging, and alerting with tools such as Prometheus, Grafana, and OpenTelemetry
• Lead incident response and run postmortems to closure
• Operate sanitized defect and telemetry feedback paths so issues observed in production environments are reproduced and fixed where the full toolchain is available
• Enforce the constraint that platform dependencies are limited to services confirmed available in the target environments, with development-only dependencies gated behind feature flags
• Maintain deployment runbooks, validation procedures, and operational documentation to a standard suitable for Government review and for execution by other cleared personnel

Skills

Kubernetes

Cloud operations

SRE

DevSecOps

Python scripting

Bash

Go

Terraform

Helm

Observability

Incident response

Education

Bachelor’s degree in computer science, engineering, or a related field

Tools

Prometheus

Grafana

OpenTelemetry

Terraform

Helm

Job description

Washington, DC Metro; Denver, CO Metro; or Colorado Springs, CO - Hybrid/Remote

Who We Are

Every organization runs on intelligence: years of accumulated knowledge, decisions, and context. As AI takes on more of that work, companies face a choice: rent that intelligence from vendors who keep the data, the context, and the results, or own it. OpenTeams exists to make ownership possible. Founded by Travis Oliphant, creator of NumPy and SciPy, and built by people with deep roots across the open-source ecosystem, including NumPy, SciPy, PyTorch, and Jupyter, we help enterprises and governments build AI they control, govern, and evolve themselves. If that sounds like your kind of work, we'd like to meet you.

Location: Washington, DC; Denver, CO; or Colorado Springs, CO preferred (hybrid). Highly qualified candidates outside these locations may also be considered for unclassified work.

Clearance: An active TS/SCI clearance with CI polygraph is strongly preferred. Candidates without an active clearance may be considered for unclassified work but must be eligible to obtain and maintain a U.S. security clearance.

Salary Range: $145,000–$250,000 USD, dependent on experience level and location

About the Role

We're looking for a SRE/DevSecOps Engineer to build and own the secure delivery pipeline for an AI/ML platform deployed into tightly controlled environments. This is a role for someone who treats security as something you build into the delivery path, not something you inspect for at the end of it.

You own the supply chain end to end — pipelines that produce hardened, signed release artifacts with a software bill of materials attached, with scanning, policy enforcement, and secrets handling built into the path rather than bolted alongside it. That path has to survive promotion into isolated and limited-connectivity environments, which means it works when the network doesn't and can prove what it shipped when nobody can reach back to check. It also has to produce the compliance evidence — audit and accreditation artifacts that fall out of the build automatically instead of getting assembled by hand under deadline.

Reliability comes with the territory. Once the platform is deployed, you're part of keeping it healthy: observability, alerting, and incident response are shared work on this team, and the person who built the release path is usually the one who can tell you what changed.

The engineers who do well here have worked inside a formal compliance framework and know the difference between a pipeline that passes a security review and one that produces the review. Experience packaging or promoting software into air-gapped or otherwise disconnected environments matters a lot — it's the part that's hardest to learn on the fly.

This position is contingent upon contract award. Travel of up to 15% may be required, primarily to Government facilities and between company locations. Unclassified work may be performed remotely, while classified promotion and validation activities require onsite work in an accredited facility and the appropriate security clearance.

Key Responsibilities

• Build and operate the CI/CD pipeline that produces versioned, signed release packages with SBOM manifests, hardened container images, deployment runbooks, and validation procedures for each promotion gate
• Execute the recurring low-to-high promotion cadence through Government-approved transfer mechanisms, including cross-domain solution submission packages, and verify environment parity after each promotion
• Integrate vulnerability management, image signing, dependency scanning, and continuous monitoring into the pipeline so accreditation evidence is generated once and reused at each promotion
• Work with the program's security engineers to keep pipeline outputs aligned to the RMF body of evidence
• Define and track service level objectives, and build monitoring, logging, and alerting with tools such as Prometheus, Grafana, and OpenTelemetry
• Lead incident response and run postmortems to closure
• Operate sanitized defect and telemetry feedback paths so issues observed in production environments are reproduced and fixed where the full toolchain is available
• Enforce the constraint that platform dependencies are limited to services confirmed available in the target environments, with development-only dependencies gated behind feature flags
• Maintain deployment runbooks, validation procedures, and operational documentation to a standard suitable for Government review and for execution by other cleared personnel

Required Skills & Experience

• U.S. citizenship and eligibility to obtain and maintain a U.S. security clearance
• 6+ years of experience in DevSecOps, site reliability engineering, platform engineering, or production operations
• 3+ years of experience supporting Department of Defense, Intelligence Community, or similarly regulated programs
• Hands‑on experience packaging or promoting software into classified, air‑gapped, or limited-connectivity environments
• Strong Kubernetes and cloud operations experience, including operating containerized production workloads in AWS
• Working knowledge of DevSecOps practices for regulated environments, including hardened containers, image signing, software bill of materials generation, vulnerability management, and continuous monitoring
• Experience working within the Risk Management Framework or a comparable security and compliance framework
• Proficiency in scripting and automation using Python, Bash, Go, or a comparable language
• Experience with infrastructure-as-code and deployment tools such as Terraform, Helm, or equivalent technologies
• Experience implementing or operating production observability stacks and participating in incident response
• Current DoD 8140/8570 qualifying certification, such as CISSP or CASP+, or the ability to obtain an appropriate certification within 90 days of hire
• Bachelor’s degree in computer science, engineering, or a related field, or equivalent practical experience

Nice to Have

• Active TS/SCI clearance with CI polygraph
• Experience with classified cloud environments, including AWS Secret or Top Secret regions
• Experience with Kubernetes platforms commonly used within Department of Defense or Intelligence Community environments
• Experience implementing or operating under a continuous Authority to Operate model
• Experience automating security evidence and continuous‑monitoring pipelines
• Familiarity with cross‑domain solutions, guards, data diodes, or comparable transfer mechanisms and their packaging requirements
• Experience supporting machine learning, AI, or GPU‑accelerated workloads in production
• Experience supporting rapid prototyping programs or defense innovation initiatives

What We Offer

• 401(k) Match – Up to 5% with full vesting after 2 years
• Unlimited PTO – With a required minimum of 15 days off annually
• Fully Remote Setup – Includes up to $3,000 equipment reimbursement
• Continuous Education – Includes up to $500 reimbursement
• Disability & Life Insurance – 100% employer-paid
• HSA & FSA Options – With monthly HSA contributions from OpenTeams

Grow With Us

At OpenTeams, growth isn’t just about the company—it’s about you.

We believe the best careers are built at the edge of your potential. That is where new tools, ideas, and technologies change the world. Here, you’ll work alongside pioneers of AI, solving problems that matter: making AI more transparent, more ethical, and more empowering. As your skills grow, our career framework provides a pathway and recognition of that increased impact.

Opportunities aren’t limited by geography. You’ll collaborate with global experts, contribute to open source projects that power the world’s technology, and stretch your skills daily. That global perspective and diversity makes our solution more universal and robust. We are committed to continuing to celebrate diversity on our team.

Supported people are successful people. We offer 100% employer paid medical premiums for employees and self-managed PTO with a minimum time off requirement, so that our teams are able to do their best work.

We invest in curiosity, creativity, and ownership. That means you’ll be trusted to boldly innovate, supported to learn fast, and celebrated for successful collaboration.

Commitment to diversity, equity, inclusion, and belonging

OpenTeams understands that valuing diverse creative practices and forms of knowledge is crucial to and enriches the company’s core mission. We encourage applications from everyone, including members of all equity-seeking communities, such as (but certainly not limited to) women, racialized and Indigenous persons, disabled people, persons of all sexual orientations, gender identities and expressions.

We are an equal opportunity employer - all qualified applicants will receive equal consideration for recruitment, interviews, employment, training, compensation, promotion, and related activities. We do not discriminate based on race, religion, gender, gender identity, gender expression, color, national origin, pregnancy, ancestry, domestic partner status, disability, sexual orientation, age, genetic predisposition, medical condition, marital status, citizenship status, military or veteran status, or any other basis covered by applicable laws. OpenTeams will not tolerate discrimination or harassment based on these characteristics or any other unlawful behavior, conduct, or purpose.