DevOps Engineer - Level 6

Dev Ops Engineer
- Level 6

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon.

We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Northrop Grumman's Space Sector is seeking a Dev Ops Engineer
- Level 6 to join our team. This position is located in Redondo Beach, CA.

Job responsibilities include, but are not limited to, the following:

• Design, develop, and maintain secure containerized software components to be deployed in cloud environments.
• Implement and maintain Kubernetes (or equivalent) clusters, including networking, security, and observability.
• Build and maintain CI/CD pipelines that enforce security gates and automated testing.
• Perform security assessments on containerized applications and cloud deployments; drive remediation efforts.
• Develop and maintain infrastructure as code for repeatable, auditable deployments.
• Collaborate with software, systems, and security engineers to define secure architectures and deployment patterns.
• Document designs, security controls, and operational procedures for cloud deployed container platforms.

Basic Qualifications:

• 14 years of relevant experience with Bachelor's degree; 12 years of relevant experience with Master's degree; 10 years of relevant experience with PhD; an additional 4 years of experience may be considered in lieu of degree
• Must have an active SCI at time of application OR an active TS clearance at time of application with the ability to obtain SCI within a reasonable period of time as determined by the company prior to start date
• Experience developing, deploying, and maintaining containerized applications (e.g., Docker)
• Experience with container orchestration platforms (e.g., Kubernetes, Open Shift)
• Experience building software for deployment to a commercial or private cloud (AWS, Azure, GCP, or on‑prem cloud)
• Experience developing CI/CD scripts to automate build processes (e.g., Jenkins, Python, Git Lab)
• Experience with Linux administration and shell scripting
• Familiarity with microservices architectures and RESTful APIs
• Experience with CI/CD pipelines (e.g., Git Lab CI, Argo CD, Defect Dojo, Git Hub Actions, Jenkins, Azure Dev Ops)
• Knowledge of secure software development practices (Dev Sec Ops , threat modeling, secure coding standards)
• Experience with vulnerability scanning tools and image security (e.g., Tenable Nessus, Trivy, Anchore, Aqua, Clair, Twistlock)
• Active Security+ Certification

Preferred Qualifications:

• Experience on Space-related Program
• Experience with Kubernetes security and hardening (Pod Security Standards, network policies, admission controllers, service mesh)
• Experience with infrastructure‑as‑code tools (e.g., Terraform, Cloud Formation, Ansible, Helm)
• Familiarity with security frameworks and standards (e.g., NIST, CIS Benchmarks, RMF, Zero Trust concepts)
• Experience integrating SAST/DAST tools into CI/CD (e.g., Sonar Qube, Checkmarx, OWASP ZAP, Burp Suite)
• Experience implementing supply chain security (XEOL, SBOMs, signed images, secure registries)
• Knowledge of container runtime security and monitoring (e.g., Falco, Sysdig, eBPF‑based tools)
• Experience with logging, monitoring, and observability stacks (e.g., Splunk, Prometheus, Grafana, ELK/EFK, Open Telemetry)
• Experience with API gateways and service meshes (e.g., Istio, Linkerd, Envoy) in a cloud environment
• Familiarity with identity and access management in cloud platforms (IAM roles, policies, service principals)
• Familiarity with cloud networking concepts (VPCs, subnets, security groups, ingress/egress, load…