DevSecOps Engineer

DESE Research, Inc. is seeking a Dev Sec Ops  Engineer to update, operate, secure, and sustain the development infrastructure used by the Cyber Works Division. This role enables DESE employees and subcontractor teammates to develop and deliver Cyber Science & Technology solutions to the warfighter. The position emphasizes reliable development platforms, on-premises systems, observability, containerized services, networking, storage, and cloud resources.

CI/CD pipeline support and development is also an important part of the overall mission.

The Dev Sec Ops  Engineer will support the full lifecycle of the division's development infrastructure, from physical servers and storage through operating systems, platform services, container workloads, monitoring, identity, networking, and Microsoft Azure resources. The engineer will maintain a dependable and secure environment for approximately 20-30 developers, including DESE employees and subcontractors.

The successful candidate will combine hands-on systems administration with infrastructure automation and practical troubleshooting. This person will work closely with software engineers, cyber researchers, systems engineers, and technical leadership to improve availability, repeatability, security, capacity, and developer experience. Responsibilities may include planned upgrades, incident response, hardware replacement, deployment automation, documentation, and CI/CD enhancement work.

• Administer, update, secure, and troubleshoot Ubuntu Linux servers and development services supporting Cyber Works Division projects.
• Operate and maintain Git Lab and Git Lab Runners, including access, upgrades, runner capacity, integrations, backups, and routine platform health.
• Deploy and sustain containerized services by building container images and using Docker Compose or Kubernetes, as appropriate for the environment.
• Automate repeatable infrastructure configuration, deployment, patching, and operational tasks with Ansible and supporting scripts.
• Implement and maintain observability using Prometheus, Loki, Promtail, and Grafana, including dashboards, log collection, alerting, capacity visibility, and service health monitoring.
• Operate supporting platform services such as Keycloak and Nginx, including identity integration, reverse proxy configuration, certificate management, and secure service exposure.
• Administer on-premises infrastructure, including server hardware, operating systems, firmware, storage, TrueNAS, backups, and recovery procedures.
• Configure, deploy, monitor, and troubleshoot RAID volumes; replace or install server components when required; and coordinate maintenance to minimize disruption.
• Manage networking equipment and connectivity for development systems, including configuration, segmentation, addressing, troubleshooting, and documentation.
• Manage Microsoft Azure resources used by development teams, with attention to access control, security reliability, cost awareness, and lifecycle management.
• Support infrastructure for AI-assisted development and model-serving workloads, including vLLM and Open Code, when required by project needs.
• Monitor infrastructure health and capacity, respond to outages and degraded performance, perform root-cause analysis, and implement corrective actions.
• Maintain system diagrams, configuration records, operational procedures, inventories, recovery documentation, and knowledge-sharing materials.
• Collaborate with developers and project teams to evaluate infrastructure needs, plan upgrades, onboard services, and remove technical blockers.
• Support secure software delivery practices, vulnerability remediation, secrets handling, configuration management, and compliance with applicable customer and organizational requirements.
• Maintain and improve CI/CD pipelines and build automation where needed, while prioritizing the broader reliability and sustainment of the development environment.

• Bachelor's degree in Computer Science, Computer Engineering, Software Engineering, Information Systems, Cybersecurity, or a related technical discipline, or equivalent relevant experience.
• Hands-on experience administering Linux-based development infrastructure, preferably Ubuntu Linux, in a multi-user engineering environment.
• Experience operating and troubleshooting on-premises servers, storage, networking, and supporting infrastructure services.
• Experience building container images and deploying containerized applications or…