DevSecOps Engineer: Multiple Levels

Torch Technologies, Inc.•Huntsville, AL

1d•Onsite

About The Position

Torch Technologies is seeking multiple DevSecOps Engineers to support the integration of development, security, and operations practices across DoD missile systems, command and control (C2BMC), radar systems, UAVs, THAAD, and other mission- and safety-critical defense platforms. This role focuses on building, securing, automating, and sustaining development and deployment pipelines while ensuring compliance with DoD cybersecurity, safety, and program requirements. Positions are available across Levels I–V, with scope, technical depth, and leadership responsibilities aligned to experience and grade.

Requirements

US Citizenship.
Bachelor’s Degree in Engineering, Computer Science, Information Technology, or related field.
0-10+ years applicable experience.
Experience or academic background in DevOps, DevSecOps, software engineering, or systems engineering.
Understanding of CI/CD concepts, automation, and system lifecycles.
Ability to document technical solutions and workflows.
Active DoD security clearance or ability to obtain one.

Nice To Haves

Experience supporting DoD missile systems, C2BMC, radars, UAVs, THAAD, or similar defense platforms.
Experience with Linux (including Red Hat) and Windows environments.
Familiarity with containerization, virtualization, and automation tools.
Experience with DoD cybersecurity frameworks (RMF, NIST 800-53, STIGs).
Experience securing pipelines for embedded software or firmware.
Active DoD security clearance or ability to obtain one.

Responsibilities

Support DevSecOps practices across the system and software lifecycle.
Design, implement, and maintain CI/CD pipelines for software, firmware, and embedded systems.
Integrate security controls, scanning, and compliance checks into development pipelines.
Support infrastructure as code (IaC) and automated environment provisioning.
Collaborate with software, firmware, cybersecurity, systems, and test teams.
Support secure configuration, patching, and system hardening activities.
Assist with RMF, STIG, and cybersecurity compliance activities.
Monitor pipeline performance, reliability, and security.
Support system integration, test, and deployment activities.
Document architectures, pipelines, and operational procedures.