Senior DevSecOps Engineer
LMI Consulting · Colorado Springs, CO, US
About this role
**Senior DevSecOps Engineer** **Overview** LMI is seeking a **Senior DevSecOps Engineer** to build and improve **secure software delivery**, **release engineering**, and **deployment platforms**. You’ll maintain **GitLab CI/CD** pipelines for **TypeScript/JavaScript, Python, and Rust** across **Linux, Windows, and macOS**, partnering with engineering, security, and infrastructure teams to make secure, reliable delivery the default. **Responsibilities** - Design and maintain **reusable GitLab CI/CD pipelines** and templates - Integrate automated **testing**, **code-quality checks**, and **security scanning** (e.g., SonarQube, Vitest, Playwright, Cypress, pytest, Cargo, Trivy, Sonatype, OWASP tools, KICS) - Build secure workflows for **scanning, signing, attesting, and publishing** containers and packages to **Nexus** - Develop cross-platform release processes: **packaging, signing, versioning, and artifact promotion** - Deploy and operate **Kubernetes** workloads across **on-prem**, **Azure**, and **AWS** - Support **elastic/high-performance computing** workloads using **Slurm** and **Azure CycleCloud** - Manage **dependency updates** and remediate vulnerabilities across applications, containers, build systems, and infrastructure - Establish security policies, remediation timelines, exceptions, and **release quality gates** - Improve **pipeline reliability**, performance, documentation, and developer **self-service** capabilities - Partner with engineering teams to strengthen security without unnecessarily slowing delivery **Required Qualifications** - Bachelor’s degree in computer science, engineering, information security, or related field - Significant experience in **DevOps/DevSecOps**, platform engineering, SRE, or release engineering - Advanced experience designing and operating **GitLab CI/CD pipelines** - Strong **Linux** and **shell scripting** skills - Experience supporting build/test/packaging workflows for **JavaScript/TypeScript, Python, or Rust** - Hands-on experience with automated **security scanning**, vulnerability management, and CI/CD quality gates - Experience building/scanning/signing/publishing **OCI container images** - Experience with **artifact repositories** such as **Sonatype Nexus Repository** - Strong **Kubernetes** experience and familiarity with **Azure or AWS** - Working knowledge of **infrastructure as code** and configuration management - Experience creating releases for **Linux, Windows, or macOS** - Strong troubleshooting, documentation, communication, and cross-team collaboration skills **Preferred Qualifications** - Experience with **Slurm**, **Azure CycleCloud**, HPC, or compute-intensive workloads - Familiarity with **Helm, Kustomize, Terraform, Ansible**, or similar tools - Experience with **SBOMs**, artifact provenance, **SLSA**, **Sigstore/Cosign**, or code-signing systems - Knowledge of **OWASP, CWE, CVE, CVSS, CIS benchmarks**, NIST guidance, and secure SDLC practices - Experience with dependency automation, self-hosted GitLab runners, observability, or incident response - Relevant cloud, Kubernetes, security, or GitLab certifications **What Success Looks Like (First Year)** - Establish reusable CI/CD standards across supported platforms and languages - Increase automated testing and security coverage while improving pipeline reliability and speed - Deliver secure, repeatable container/package and cross-platform release workflows - Improve vulnerability ownership, prioritization, and rem
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.