DevSecOps Engineer Mid

MAG Aerospace•Coolbaugh Township, PA

1d•$120,000•Onsite

About The Position

MAG Aerospace is seeking a skilled, detail-oriented Mid-Level DevSecOps Engineer to support the Wideband Control Integration Division at Tobyhanna Army Depot. The role is the primary DevSecOps engineering position for a continuous integration and continuous deployment (CI/CD) pipeline and bridges development, security, and operations through infrastructure-as-code practices, secure infrastructure maintenance, and platform observability. The position is performed daily onsite with no telework. Candidates must be U.S. citizens and hold a current DoD security clearance, or be able to obtain one. The engineer will support and enhance automation testing for various satellite systems for PdM Wideband Enterprise Satellite Systems (WESS). The position requires a degree in Computer Science or a related engineering field and at least three years of professional DevSecOps experience. The candidate must hold or be willing to obtain Security+ or an equivalent certification shortly after starting. The position is contingent upon the candidate’s ability to meet physical and medical requirements as needed, including compliance with applicable federal, state, and local jurisdictional requirements. The projected compensation range is up to $120,000 annualized. Salary is determined by factors including location, education, skills, experience, contract-specific affordability, and organizational requirements.

Requirements

At least 3 years of experience in coding and software pipelines in a professional or academic environment.
A degree in Computer Science or a related engineering field and at least 3 years of experience in a professional working environment as a DevSecOps engineer.
Must be a U.S. citizen.
Must hold an active DoD Secret clearance or be able to obtain one; the position summary also states candidates must hold a current DoD security clearance.
Must hold or be willing to obtain Security+ or an equivalent certification shortly after starting.
Able to work closely with software developers to troubleshoot deployment failures and optimize pipeline performance.
Strong analytical skills to debug issues across operating system, container, and application layers.
Able to work within a small team, self-task and make decisions, and adapt to a changing environment.

Nice To Haves

Experience administering Linux environments, particularly Rocky Linux or similar RHEL-based distributions.
Hands-on experience deploying and managing RKE2 (Rancher Kubernetes Engine 2) clusters.
Proficiency writing and maintaining Ansible playbooks for configuration management.
Experience using Terraform for infrastructure provisioning.
Familiarity with container networking and security policies.
Understanding of persistent storage in Kubernetes using Longhorn.
Experience automating TLS certificate provisioning and lifecycle management with Cert-Manager.
Ability to enforce Kubernetes-native security and governance using Kyverno (Policy-as-Code).
Proficiency with GitLab EE, including repository management, writing .gitlab-ci.yml pipelines, and maintaining GitLab Runners.
Experience configuring and managing artifacts, dependencies, and container images using Sonatype Nexus Repository Manager.
Experience managing secure access to credentials and tokens using OpenBao integrated into Kubernetes via the External Secrets Operator.
Experience configuring the Kube-Prometheus-Stack.
Understanding of log aggregation and querying using Loki.
Familiarity with deploying and configuring Grafana Alloy for metric, log, and trace collection.

Responsibilities

Assist in designing, building, and maintaining automated CI/CD pipelines for secure and efficient software delivery.
Provision and configure infrastructure using declarative tools and configuration management.
Support deployment, maintenance, and security of core platform services in Kubernetes.
Implement policy-as-code, manage secret injection, and integrate security scanning tools into developer workflows.
Maintain monitoring, logging, and telemetry systems to support platform health, uptime, and rapid incident response.
Support and enhance automation testing for various satellite systems for PdM Wideband Enterprise Satellite Systems (WESS).
Work closely with software developers to troubleshoot deployment failures and optimize pipeline performance.
Debug issues across operating system, container, and application layers.