CI​/CD Infrastructure Software Engineer

Relocation: Yes
- Relocation may be available

Travel Requirements: None/Infrequent

As a CI/CD Infrastructure Software Engineer specializing in App Sec and Operations, you will play a critical role in maintaining and advancing ULA’s core CI/CD toolchain, including Git Lab, Artifactory, XRay, and Sonar Qube. You will support tool uptime, execute security scanning workflows, troubleshoot pipeline and runner issues, and ensure that ULA’s development environment meets rigorous audit, compliance, and reliability standards.

You will partner across Software Engineering, Cybersecurity, and Cloud teams to strengthen secure coding practices and deliver stable, mission‑aligned development infrastructure that enables engineers to build with confidence.

• Experience supporting and operating on‑prem and cloud based Continuous Integration / Continuous Deployment (CI/CD) platforms, including:
• JFrog Artifactory lifecycle management and repository governance
• JFrog XRay scanning management and policy enforcement
• Sonar Qube configuration, ruleset updates, and remediation workflows
• Git Lab runners, permissions, and basic pipeline troubleshooting

• Understanding of secure coding concepts, static analysis, dependency scanning, Common Vulnerabilities and Exposures (CVE) identification, and application security remediation workflows.
• Ability to execute scanning routines, analyze findings, open remediation tasks, and support the secure coding dashboard & remediation cycle.

• Basic hands‑on experience with Amazon Web Services (AWS) core services, especially those relevant to CI/CD and scanning pipelines (S3, IAM, EC2/EKS).
• Familiarity with Kubernetes concepts and supporting Kubernetes based workloads.

• Foundational experience with Infrastructure as Code (IaC) or automation tooling such as Terraform, Ansible, Bash/Python scripting.
• Ability to follow established IaC patterns to support CI/CD infrastructure updates, maintenance tasks, and access configurations.

• User access, permission updates, and audit support
• Monitoring, alert response, and system health checks
• Package and artifact lifecycle management
• Support quarterly upgrade cycles, configuration fixes, and stability improvements.

• Execute routine security scans across tools and pipelines.
• Review, triage, and escalating CVE or policy violations.
• Assist SWE teams in interpreting scanner reports and preparing remediation tasks.
• Assist CI/CD engineers and developers with pipeline break/fix issues.
• Maintain reliable builds for Software Engineering Teams by supporting artifact availability, scanner health, and Git Lab runner readiness.

• Participate in Cybersecurity Maturity Model Certification (CMMC) and National Institute of Standards and Technology (NIST) related remediation work through accurate documentation, required evidence capture, and execution of recurring security activities.

• Work closely with senior engineers, including members of Cloud, CI/CD Infrastructure, and CI/CD Pipelines, on shared engineering tasks.
• Provide timely support to Software Engineering Teams during migrations, scanning cycles, or code delivery events.
• Communicate clearly with cross‑functional teams.

Bachelor

Minimum of 4 years of related work experience

• Bachelor's degree in a STEM (Science, Technology, Engineering, Mathematics) field from an accredited college or university
• Four years of directly related exempt work experience may be used to satisfy the bachelor’s degree requirement
• 4+ years of experience in Dev Ops, Cloud Engineering, Application Security (App Sec), or Software Engineering
• Experience supporting production CI/CD systems or Dev Sec Ops  workflows
• Hands‑on experience with the following:
  Git Lab, Artifactory, Sonar Qube, or security scanning tools
• Intermediate understanding of software build pipelines,…