DevSecOps Engineer

• Location Hillsborough County,Tampa, FL, 33611,United States
• Employee Type FT Exempt
• Travel 15%

The Opportunity - THIS IS A CLEARED POSITION. Only candidates with ACTIVE SECRET Security Clearance with the U.S. Government will be considered.

We are seeking a Dev Sec Ops  Engineer with deep Kubernetes expertise to design, implement, and maintain secure, scalable cloud-native platforms. This role bridges development, security, and operations to embed security throughout the software delivery lifecycle while enabling high-velocity engineering teams.

Platform & Infrastructure

• Design, provision, and maintain production Kubernetes clusters (RKE2 / EKS / GKE / AKS) across cloud and on-premises environments
• Manage cluster lifecycle: upgrades, node pool scaling, multi-tenancy, and namespace governance
• Implement and maintain CNI solutions (Calico, Cilium, Multus) including advanced networking topologies such as macvlan and SR-IOV
• Operate Git Ops workflows (e. g. ArgoCD) for declarative, auditable cluster state management
• Develop and maintain Helm charts for platform and application services

Dev Sec Ops  & CI/CD

• Build and maintain CI/CD pipelines in Git Lab CI (and/or Git Hub Actions) with integrated security scanning and artifact signing
• Integrate SAST, DAST, SCA, and container image scanning (Trivy, Grype, Semgrep) into pipeline gates
• Implement supply-chain security controls: SBOM generation, cosign image signing, and Sigstore policy enforcement
• Automate OS image builds using Packer (QEMU, vSphere) targeting RHEL, Alma Linux, Debian/Ubuntu, and Windows
• Manage secrets at scale using Vault, External Secrets Operator, or equivalent solutions

Security & Compliance

• Enforce runtime security through admission controllers (Kyverno / OPA Gatekeeper), Pod Security Standards, and network policies
• Own vulnerability management processes including scheduled scanning, triage, and remediation SLAs
• Support compliance initiatives (SOC 2, FedRAMP, NIST 800-53) by maintaining audit-ready infrastructure-as-code and evidence artifacts
• Conduct threat modeling and security architecture reviews for new platform capabilities
• Respond to and lead post-mortems for security incidents and infrastructure outages

Observability & Reliability

• Deploy and operate observability stacks:
  Prometheus, Grafana, Loki, and Open Telemetry collectors
• Define and track SLOs/SLAs; build alerting and on-call runbooks to drive reliability improvements
• Implement cost observability and right-sizing workflows for cloud and on-prem workloads
• Partner with development teams to design deployment patterns, resource quotas, and autoscaling strategies
• Produce clear documentation, runbooks, and internal training materials for platform capabilities
• Mentor junior engineers and participate in architecture decision records (ADRs)

• Fluency in English (written and spoken)
• Must meet eligibility requirements to obtain US Security clearance
• Active US Security clearance preferred.

• High School Diploma Required
• Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKS) Certification Preferred

• 5+ years of hands‑on experience in a Dev Ops, Platform Engineering, or SRE role
• 3+ years managing production Kubernetes clusters at scale
• Deep proficiency with Git Lab CI or Git Hub Actions, including advanced pipeline patterns (DAGs, dynamic child pipelines, matrix builds)
• Strong scripting skills in Bash and at least one higher‑level language (Python, Go, or similar)
• Solid understanding of Linux internals, networking (TCP/IP, DNS, BGP basics), and container runtimes (containerd, CRI‑O)
• Experience with infrastructure‑as‑code tools:
  Terraform / Open Tofu and Helm
• Demonstrated experience integrating security tooling into CI/CD pipelines
• Familiarity with cloud platforms: AWS, GCP, or Azure

• Experience with GPU workloads on Kubernetes (NVIDIA / Intel device plugins, GStreamer / FFmpeg hardware acceleration pipelines)
• Familiarity with Multus CNI and SR‑IOV networking for high‑throughput edge or media workloads
• Experience building images with Packer targeting multiple hypervisors (QEMU, Hyper‑V,…