DevSecOps Engineer III

BLUE ORIGIN•Huntsville, AL

3d•$150,931 - $230,513

About The Position

This role is part of Blue National Security (BNS), which designs, develops, and delivers launch and spacecraft systems for national security missions. The DevSecOps Engineer III supports the flight software team by owning the CI/CD pipelines and secure build systems used to build, test, and deliver flight software. The role focuses on secure, reproducible, and auditable automation, including in classified, closed, and offline environments. The engineer designs and operates GitLab CI/CD pipelines, hardens build environments, generates software supply-chain evidence such as SBOMs and signed artifacts, and establishes practices for the team. The work supports developers, testing, compliance, integration, and release readiness. Relocation is provided, travel is expected up to 15% of the time, and interviews include a technical assessment. An active clearance is highly desired but not required; TS/SCI with CI poly or ability to upgrade to it is noted.

Requirements

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Aerospace Engineering, or a related STEM field.
At least 5 years of professional experience in DevOps, DevSecOps, or build and release engineering, ideally for software in secure or regulated environments.
Hands-on experience designing and operating GitLab CI/CD pipelines, including runners, shared templates, and pipeline-as-code.
Experience building and securing OCI container environments using Docker and Podman for software builds, including hardening images and managing container registries.
Experience generating, validating, and consuming software bills of materials (SBOMs) and securing the software supply chain.
Strong experience administering and securing Linux systems, and scripting skills such as Python and Bash.
Experience with Git version control.
Must be a U.S. citizen or national, U.S. permanent resident (current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Nice To Haves

Experience with minimal, hardened container images and secure base-image supply chains, such as Chainguard.
Experience with DoD Software Factory practices or reference platforms, such as Platform One or Iron Bank, or equivalent DevSecOps reference designs.
Experience building, deploying, and sustaining software pipelines in classified, closed, or air-gapped (offline) environments, including mirrored registries and package repositories.
Experience with artifact signing, provenance, and attestation, such as Sigstore/cosign or SLSA, and with vulnerability and license scanning in CI.
Experience with build systems and dependency management for C/C++ and embedded toolchains, such as CMake, Bazel, or Yocto.
Experience with infrastructure as code and configuration management, such as Terraform or Ansible.
Familiarity with security and compliance frameworks such as NIST SP 800-53, the Risk Management Framework (RMF), or NIST SSDF.
Experience supporting flight or embedded software development pipelines, including software-in-the-loop (SIL) or hardware-in-the-loop (HIL) testing in CI.
Master's degree in a related field.
Active TS/SCI clearance.

Responsibilities

Design, build, and operate GitLab CI/CD pipelines for flight software, covering builds, static analysis, unit tests, software-in-the-loop (SIL), hardware-in-the-loop (HIL), artifact promotion, and release.
Own the secure build system, including reproducible builds, hardened minimal base images, pinned and verified dependencies, and signed artifacts.
Generate, validate, and retain SBOMs and provenance for every release; run vulnerability and license scanning and drive findings to closure.
Build and sustain pipelines in classified, closed, and offline environments, including mirrored registries and package repositories, offline update paths, and cross-domain artifact transfer.
Align pipelines with DoD Software Factory practices and customer and accreditor security controls, producing compliance evidence as a by-product of the build.
Define CI/CD standards and best practices for branching, merge gating, runner management, and caching, and automate manual build, test, and release steps.
Partner with flight software developers, test engineers, and systems security to translate security and process requirements into automated pipeline checks.
Partner with Site Reliability Engineering (SRE) to secure compute, storage, and network resources, resolve cross-boundary issues, and represent the team's infrastructure needs.
Mentor and peer-coach Level I and II engineers.
Support integration, test campaigns, and release readiness activities as needed.

Benefits

Medical insurance.
Dental insurance.
Vision insurance.
Basic and supplemental life insurance.
Paid parental leave.
Short- and long-term disability.
401(k) with company match of up to 5%.
Education Support Program.
Stock options for all regular employees working at least 20 hours per week.
Paid time off of up to four weeks per year based on weekly scheduled hours.
Up to 14 company-paid holidays.
Depending on role type and job level, employees may be eligible for benefits and bonuses based on individual contributions or other factors; amounts and eligibility are not guaranteed.