Software Engineer, DevSecOps

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.

For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.

Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.

We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.

As a key member of the integrated solutions software team, you will design, develop, and own the software infrastructure that lets Apex teams move faster, scale, and keep delivering reliable products. You will build the critical systems that automate software builds, container image creation, security scanning, and SBOM generation across embedded software, flight software, and internal tooling — making security and compliance automatic, auditable, and invisible.

• Build and maintain CI/CD pipelines across a range of languages and functions, primarily in Git Hub Actions.
• Develop and optimize containerized build and test workflows; own base images, build caching, and artifact management (JFrog Artifactory).

• Own the secure container supply chain: harden base images, manage trusted registries, and integrate image scanning into every build.
• Automate SBOM generation and vulnerability/license scanning (e.g., JFrog Xray) across artifacts and container images, delivering results back to software teams in a clear, actionable, automated format.
• Own static analysis tooling (e.g., Black Duck, Klocwork) and surface findings in a digestible, automated way.

• Code Signing:
  Own code-signing infrastructure and verification workflows that guarantee the authenticity and integrity of Apex software
• Build lightweight internal solutions — policy-as-code, custom scanners, CI/CD integrations — that make security and compliance automatic and auditable.
• Partner with software engineers to identify, triage, and remediate application security vulnerabilities; champion secure coding, threat modeling, and developer security training.
• Work with embedded, ground, and infrastructure teams to embed security principles directly into CI/CD pipelines.

Applicants must hold U.S. Person status and must be able to obtain and maintain a U.S. Department of Defense (DoD) security clearance. This requirement is mandated by federal law and the demands of the work performed.

4+ years of hands-on experience in Dev Ops, platform / Dev Sec Ops , or cloud infrastructure roles.

Bachelor's degree in Computer Science, Electrical Engineering, or equivalent experience.

Strong proficiency building and maintaining CI/CD pipelines in Git Hub Actions.

Hands-on experience with Docker and container development — building, hardening, and optimizing images.

Experience with
secure container, SBOM, and scanning tools (e.g., Chainguard, JFrog Xray, Binarly).

Experience with artifact management (JFrog Artifactory).

Experience with container orchestration (Kubernetes).

Working knowledge of Linux and system administration.

Experience with cloud infrastructure (AWS preferred), networking, and services.

Familiarity with static analysis tooling (Black Duck, Klocwork)

Apex believes…