DevSecOps Engineer III

Blue Origin•Littleton, CO

About The Position

Blue Origin is hiring a DevSecOps Engineer III for Blue National Security’s flight software team. The role focuses on designing, operating, and securing the systems that build, test, and deliver Blue Ring flight software. The engineer will own CI/CD pipelines and secure build systems end to end, establish practices for the team, and ensure builds are secure, reproducible, and auditable—including in classified, closed, and offline environments. The position produces supply-chain evidence such as software bills of materials (SBOMs), provenance, and signed artifacts; automates security and compliance checks; and reduces friction for developers while improving confidence in releases. The engineer collaborates with flight software developers, test engineers, systems security, and Site Reliability Engineering, and mentors Level I and II engineers. Relocation is provided, travel is expected up to 15%, and interviews include a technical assessment. An active clearance is highly desired but not required; the posting references TS/SCI with CI poly or the ability to upgrade to it.

Requirements

Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Aerospace Engineering, or a related STEM field.
At least 5 years of professional experience in DevOps, DevSecOps, or build and release engineering; experience with software in secure or regulated environments is ideal.
Hands-on experience designing and operating GitLab CI/CD pipelines, including runners, shared templates, and pipeline-as-code.
Experience building and securing OCI container environments using Docker and Podman for software builds, including hardening images and managing container registries.
Experience generating, validating, and consuming software bills of materials (SBOMs) and securing the software supply chain.
Strong experience administering and securing Linux systems.
Scripting skills, such as Python and Bash.
Experience with Git version control.
Must be a U.S. citizen or national, U.S. permanent resident (current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Nice To Haves

Experience with minimal, hardened container images and secure base-image supply chains, such as Chainguard.
Experience with DoD Software Factory practices or reference platforms, such as Platform One or Iron Bank, or equivalent DevSecOps reference designs.
Experience building, deploying, and sustaining software pipelines in classified, closed, or air-gapped offline environments, including mirrored registries and package repositories.
Experience with artifact signing, provenance, and attestation, such as Sigstore/cosign or SLSA, and with vulnerability and license scanning in CI.
Experience with build systems and dependency management for C/C++ and embedded toolchains, such as CMake, Bazel, or Yocto.
Experience with infrastructure as code and configuration management, such as Terraform or Ansible.
Familiarity with security and compliance frameworks such as NIST SP 800-53, the Risk Management Framework (RMF), or NIST SSDF.
Experience supporting flight or embedded software development pipelines, including SIL or HIL testing in CI.
Master’s degree in a related field.
Active TS/SCI clearance.

Responsibilities

Design, build, and operate GitLab CI/CD pipelines for flight software, covering build, static analysis, unit testing, software-in-the-loop (SIL), hardware-in-the-loop (HIL), artifact promotion, and release.
Own the secure build system, including reproducible builds, hardened minimal base images, pinned and verified dependencies, and signed artifacts.
Generate, validate, and retain SBOMs and provenance for every release; run vulnerability and license scanning and drive findings to closure.
Build and sustain pipelines in classified, closed, and offline environments, including mirrored registries and package repositories, offline update paths, and artifact transfers across domains.
Align pipelines with DoD Software Factory practices and customer and accreditor security controls, producing compliance evidence as a by-product of the build.
Define CI/CD standards and best practices for branching, merge gating, runner management, and caching; automate manual build, test, and release steps.
Partner with flight software developers, test engineers, and systems security to translate security and process requirements into automated pipeline checks.
Partner with Site Reliability Engineering (SRE) to secure compute, storage, and network resources, resolve cross-boundary issues, and represent the team’s infrastructure needs.
Mentor and peer-coach Level I and II engineers.
Support integration, test campaigns, and release-readiness activities as needed.

Benefits

Medical, dental, and vision insurance.
Basic and supplemental life insurance.
Paid parental leave.
Short- and long-term disability.
401(k) with company match of up to 5%.
Education Support Program.
Stock options for regular employees working at least 20 hours per week.
Up to four weeks of paid time off per year based on weekly scheduled hours.
Up to 14 company-paid holidays.
Depending on role type and job level, employees may be eligible for benefits and bonuses based on individual contributions, company results, or other factors.