Senior DevSecOps Engineer

We are seeking a Senior Dev Sec Ops  Engineer to build and improve secure software delivery, release engineering, and deployment platforms. This role will maintain Git Lab CI/CD pipelines for Type Script/JavaScript, Python, and Rust applications across Linux, Windows, and macOS.

The ideal candidate combines strong CI/CD and cloud-native engineering experience with practical application-security expertise. They will partner with engineering, security, and infrastructure teams to make secure, reliable delivery the default throughout the software development lifecycle.

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial‑grade platforms and mission‑ready AI to federal agencies at commercial speed.

Leveraging our mission‑ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors—helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

• Design and maintain reusable Git Lab CI/CD pipelines and templates.
• Integrate automated testing, code‑quality checks, and security scanning using tools such as Sonar Qube, Vitest, Playwright, Cypress, pytest, Cargo, Trivy, Sonatype, OWASP tools, and KICS.
• Build secure workflows for scanning, signing, attesting, and publishing containers and packages to Nexus.
• Develop cross‑platform release processes, including packaging, signing, versioning, and artifact promotion.
• Deploy and operate Kubernetes workloads across on‑premises, Azure, and AWS environments.
• Support elastic and high‑performance computing workloads using platforms such as Slurm and Azure Cycle Cloud.
• Manage dependency updates and remediate vulnerabilities across applications, containers, build systems, and infrastructure.
• Establish practical security policies, remediation timelines, exceptions, and release quality gates.
• Improve pipeline reliability, performance, documentation, and developer self‑service capabilities.
• Partner with engineering teams to strengthen security without unnecessarily slowing delivery.

Required Qualifications

• Bachelor’s degree in computer science, engineering, information security, or a related field.
• Significant experience in Dev Ops, Dev Sec Ops , platform engineering, site reliability engineering, or release engineering.
• Advanced experience designing and operating Git Lab CI/CD pipelines.
• Strong Linux and shell‑scripting skills.
• Experience supporting build, test, and packaging workflows for JavaScript/Type Script, Python, or Rust.
• Hands‑on experience with automated security scanning, vulnerability management, and CI/CD quality gates.
• Experience building, scanning, signing, and publishing OCI container images.
• Experience with artifact repositories such as Sonatype Nexus Repository.
• Strong Kubernetes experience and familiarity with Azure or AWS.
• Working knowledge of infrastructure as code and configuration management.
• Experience creating releases for Linux, Windows, or macOS.
• Strong troubleshooting, documentation, communication, and cross‑team collaboration skills.

Preferred Qualifications

• Experience with Slurm, Azure Cycle Cloud, HPC, or compute‑intensive workloads.
• Familiarity with Helm, Kustomize, Terraform, Ansible, or similar tools.
• Experience with SBOMs, artifact provenance, SLSA, Sigstore/Cosign, or code‑signing systems.
• Knowledge of OWASP, CWE, CVE, CVSS, CIS benchmarks,…