SRE & DevSecOps Engineer for Classified AI Platform

OpenTeams; Washington, Denver, Colorado Springs (District of Columbia, CO, CO); Hybrid; USD 145,000 - 250,000; Full time

Benefits offered by this job

401(k) Match

Unlimited PTO

Fully Remote Setup

Continuous Education

Disability & Life Insurance

HSA & FSA Options

Job summary

OpenTeams in the Washington, DC area is hiring a SRE/DevSecOps Engineer to own the secure delivery pipeline for an AI/ML platform deployed in tightly controlled environments.

You will build versioned, signed releases with SBOMs, enforce vulnerability scanning, and ensure RMF-aligned evidence is produced automatically.

The role requires US citizenship and eligibility for a security clearance, travel up to 15%, and a hybrid/remote work setup with potential onsite in accredited facilities.

Qualifications

• U.S. citizenship and eligibility to obtain and maintain a U.S. security clearance.
• 6+ years of experience in DevSecOps, site reliability engineering, platform engineering, or production operations.
• 3+ years of experience supporting DoD, IC, or similarly regulated programs.
• Hands‑on experience packaging or promoting software into classified, air‑gapped, or limited-connectivity environments.
• Strong Kubernetes and cloud operations experience, including operating containerized production workloads in AWS.
• Working knowledge of DevSecOps practices for regulated environments, including hardened containers, image signing, SBOMs, vulnerability management, and continuous monitoring.
• Experience with Risk Management Framework or comparable security/compliance framework.
• Proficiency in scripting and automation using Python, Bash, Go, or similar.
• Experience with infrastructure‑as‑code and deployment tools such as Terraform, Helm, or equivalents.
• Experience implementing or operating production observability stacks and participating in incident response.
• Current DoD 8140/8570 qualifying certification (e.g., CISSP or CASP+) or ability to obtain within 90 days.
• Bachelor’s degree in computer science, engineering, or related field, or equivalent practical experience.

Responsibilities

• Build and operate the CI/CD pipeline that produces versioned, signed release packages with SBOM manifests, hardened container images, deployment runbooks, and validation procedures for each promotion gate
• Execute the recurring low-to-high promotion cadence through Government-approved transfer mechanisms, including cross-domain solution submission packages, and verify environment parity after each promotion
• Integrate vulnerability management, image signing, dependency scanning, and continuous monitoring into the pipeline so accreditation evidence is generated once and reused at each promotion
• Work with the program's security engineers to keep pipeline outputs aligned to the RMF body of evidence
• Define and track service level objectives, and build monitoring, logging, and alerting with tools such as Prometheus, Grafana, and OpenTelemetry
• Lead incident response and run postmortems to closure
• Operate sanitized defect and telemetry feedback paths so issues observed in production environments are reproduced and fixed where the full toolchain is available
• Enforce the constraint that platform dependencies are limited to services confirmed available in the target environments, with development-only dependencies gated behind feature flags
• Maintain deployment runbooks, validation procedures, and operational documentation to a standard suitable for Government review and for execution by other cleared personnel

Skills

Kubernetes

Cloud operations

SRE

DevSecOps

Python scripting

Bash

Go

Terraform

Helm

Observability

Incident response

Education

Bachelor’s degree in computer science, engineering, or a related field

Tools

Prometheus

Grafana

OpenTelemetry

Terraform

Helm

Job description

OpenTeams in the Washington, DC area is hiring a SRE/DevSecOps Engineer to own the secure delivery pipeline for an AI/ML platform deployed in tightly controlled environments.

You will build versioned, signed releases with SBOMs, enforce vulnerability scanning, and ensure RMF-aligned evidence is produced automatically.

The role requires US citizenship and eligibility for a security clearance, travel up to 15%, and a hybrid/remote work setup with potential onsite in accredited facilities.