DevSecOps Engineer Security Clearance

Position: DevSecOps Engineer with Security Clearance
The Opportunity
We are seeking a Dev Sec Ops  Engineer with deep Kubernetes expertise to design, implement, and maintain secure, scalable cloud-native platforms. This role bridges development, security, and operations to embed security throughout the software delivery lifecycle while enabling high-velocity engineering teams.

Key Responsibilities (Principal Duties and Accountabilities
* Essential Functions) Platform & Infrastructure Design, provision, and maintain production Kubernetes clusters (RKE2 / EKS / GKE / AKS) across cloud and on-premises environments
Manage cluster lifecycle: upgrades, node pool scaling, multi-tenancy, and namespace governance
Implement and maintain CNI solutions (Calico, Cilium, Multus) including advanced networking topologies such as macvlan and SR-IOV
Operate Git Ops workflows (e. g. ArgoCD) for declarative, auditable cluster state management
Develop and maintain Helm charts for platform and application services Dev Sec Ops  & CI/CD Build and maintain CI/CD pipelines in Git Lab CI (and/or Git Hub Actions) with integrated security scanning and artifact signing
Integrate SAST, DAST, SCA, and container image scanning (Trivy, Grype, Semgrep) into pipeline gates
Implement supply-chain security controls: SBOM generation, cosign image signing, and Sigstore policy enforcement
Automate OS image builds using Packer (QEMU, vSphere) targeting RHEL, Alma Linux, Debian/Ubuntu, and Windows
Manage secrets at scale using Vault, External Secrets Operator, or equivalent solutions Security & Compliance Enforce runtime security through admission controllers (Kyverno / OPA Gatekeeper), Pod Security Standards, and network policies
Own vulnerability management processes including scheduled scanning, triage, and remediation SLAs
Support compliance initiatives (SOC 2, FedRAMP, NIST 800-53) by maintaining audit-ready infrastructure-as-code and evidence artifacts
Conduct threat modeling and security architecture reviews for new platform capabilities
Respond to and lead post-mortems for security incidents and infrastructure outages Observability & Reliability Deploy and operate observability stacks:
Prometheus, Grafana, Loki, and Open Telemetry collectors
Define and track SLOs/SLAs; build alerting and on-call runbooks to drive reliability improvements
Implement cost observability and right-sizing workflows for cloud and on-prem workloads Collaboration & Developer Enablement Partner with development teams to design deployment patterns, resource quotas, and autoscaling strategies
Produce clear documentation, runbooks, and internal training materials for platform capabilities
Mentor junior engineers and participate in architecture decision records (ADRs)