DevSecOps Engineer - VA Job Northern Kentucky USA,IT/Tech

Connected Logistics is seeking a Dev Sec Ops Engineer to join a platform engineering team supporting the Department of Veterans Affairs Chief AI Office (CAIO), building and operating the cloud infrastructure, CI/CD pipelines, and containerization workflows that support AI/ML and software delivery for pilot programs. The platform runs on Azure Kubernetes Service (AKS), automated via Git Hub Actions reusable workflows, with infrastructure-as-code being stood up in Pulumi (Type Script).

You'll own key parts of the lifecycle — from reusable workflow libraries and container build/scan pipelines to multi-tenant AKS platform operations and federal security compliance.

What You'll Get to Do as a Dev Sec Ops Engineer

Author and maintain a reusable Git Hub Actions workflow library consumed by tenant application repositories to build, scan, sign, and deploy.
Build and execute CI/CD pipelines that deploy a self-service platform into customer Azure environments; help establish and expand Pulumi (Type Script) IaC patterns from the current baseline.
Deploy and maintain cloud platform infrastructure: AKS clusters, load balancers, node pools, NSGs, and Istio service mesh routing.
Containerize tenant applications using multi-stage Docker builds and deploy them to AKS through automated pipelines.
Integrate and maintain a security scanning pipeline using Semgrep (SAST), Grype/Snyk (SCA), and Trivy (container image scanning), plus SBOM generation and image signing (Cosign/Sigstore), enforcing quality gates in all CI workflows.
Automate multi-tenant platform onboarding: namespace provisioning, RBAC role bindings, and virtual service creation via scripted workflows.
Manage container image registries (GHCR or equivalent), versioning, and release automation (e.g., Release Please, Dependabot).
Help stand up and maintain observability infrastructure for platform and AI/ML workloads.
Support the AI/ML platform stack (models running on Kubernetes; Azure AI Foundry and Azure ML Work spaces as the platform matures).
Collaborate with software engineers to containerize their applications for production deployment.
Follow Dev Sec Ops best practices for security integration, IaC, SRE, and operational visibility.
Produce lightweight but useful documentation of systems, infrastructure, and automation mechanisms.

Requirements

Must be a U.S. Citizen to obtain VA clearance.
BS degree with 7+ years of experience
Independent, with a mindset toward continuous learning, drive for self-study, and resourcefulness
Strong communication skills and a customer-facing level of polish
Able to produce lightweight but useful documentation of system design and automation mechanisms

Core experience (5+ years across the following):

Git Hub Actions CI/CD
, including reusable workflow authorship (primary requirement)
Container image build (multi-stage Dockerfiles), scanning, and registry management (GHCR or equivalent), including versioning and release automation
Security scanning toolchain: SAST (Semgrep or equivalent), SCA (Grype/Snyk/equivalent), container vulnerability scanning (Trivy or equivalent); SBOM generation and image signing (Cosign/Sigstore) a plus
Federal application security: OWASP, Zero Trust principles, encryption at rest and in transit, FISMA High controls; handling of PII/PHI in cloud environments

Required technology domains (production experience):

Multi-tenant Kubernetes platform operations
Infrastructure-as-code (Terraform or Pulumi). Pulumi with Type Script strongly preferred. The team is actively standing this up, so the ability to establish and mature Pulumi patterns from a discovery baseline is valued more than prior years in Pulumi specifically.
Istio service mesh: Virtual Service/Gateway configuration, mTLS, and multi-tenant routing…