DevSecOps Engineer
Air · Pittsburgh, Pennsylvania, United States
About this role
**Company Description** Air is the leader in Enterprise Readiness. Our mission is to establish readiness as a real-time condition that is continuously achieved. Today, a dangerous Readiness Gap exists between what the front line needs and what is delivered. Our AI-native platform, Air Enterprise Readiness, aligns development, production, delivery, and sustainment into one coordinated execution system for government agencies and industrial suppliers. By revealing true capacity, exposing real constraints, coordinating resources, and executing at the speed of operational demands, the front line gets what it needs to succeed. **Job Description** We are seeking a skilled and dedicated DevSecOps Engineer to join our Engineering team. As a DevSecOps Engineer at Air, you will be essential to securing, operating, and continuously deploying to U.S. government-accredited environments. To do this job well, you must be obsessed with quality and efficiency and love working with diverse technologies. You have a strong understanding of DevSecOps principles, automation, and continuous integration/continuous delivery (CI/CD). Our ideal candidate is energized by building scalable technology to support the defense and intelligence communities. This role is full-time and located out of our office in Pittsburgh, PA. Travel may be required up to 10%. **Scope of Responsibilities** - Secure, operate, and continuously deploy to FedRAMP and IL5 environments. - Document security processes, vulnerabilities, remediation actions, and compliance measures. - Partner with engineers to interpret security requirements and plan effective control implementations. - Integrate security tools into the CI/CD pipeline, run security scans, and remediate vulnerabilities. - Translate and synthesize complex concepts and architectures into clear evidence artifacts, including System Security Plans (SSP) and architecture diagrams. - Build and support CI/CD infrastructure utilizing GitLab, Jenkins, Helm, and Kubernetes. - Serve as a security Subject Matter Expert (SME) and govern architectures to ensure they remain within the scope of an ATO. **Qualifications** - U.S. Citizenship is required. - Bachelor’s degree in Computer Science, Mathematics, or a related technical field. **Required Skills** - Linux/Unix experience, including command line and shell scripting. - Hands-on operational AWS/GCP/Azure experience. - Experience with cybersecurity frameworks (FedRAMP, FISMA, DoD SRG, NIST 800-171). - Experience building and maintaining CI/CD pipelines with Jenkins, GitLab CI, or related technologies. - Experience with Systems Monitoring/Alerting (Splunk, PagerDuty, Prometheus, Alertmanager, Grafana). - Experience with infrastructure as code. - Current possession of a U.S. security clearance, or the ability to obtain one with our sponsorship. **Desired Skills** - Experience maintaining compliance within an accredited environment, ensuring systems and processes operate according to the granted ATO. - Programming experience with: Golang, Java, Python, Groovy, Bash, or Ruby. - Experience with container-based architectures (Docker, Kubernetes, Helm) and deploying/supporting microservices. - Experience in or exposure to the nuances of a startup or other entrepreneurial environment. - Familiarity with test automation, including security testing and performance testing. **Closing** We firmly believe that past performance is the best indicator of future performance. If you thrive while buildi
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.