DevSecOps Engineer - Senior Level

Tangram Flex • Dayton, OH

68d • Hybrid

About The Position

Tangram Flex is seeking a senior DevSecOps / Platform Engineer to lead and advance cloud-native platform infrastructure, secure software delivery pipelines, and DevSecOps strategy. The role architects, optimizes, and scales cloud-native application build environments and CI/CD pipelines supporting internal products and customer deployments across unclassified and classified domains. As a technical anchor, the engineer mentors colleagues, drives platform architecture decisions, and collaborates with cross-functional software teams to accelerate Continuous Authority to Operate (cATO) processes and integrate shift-left security practices.

The position leads enterprise CI/CD and GitOps architecture, secure infrastructure design and platform engineering, compliance-as-code and security controls, and observability and reliability strategies. It includes work with AWS GovCloud, Kubernetes, Infrastructure-as-Code, DoD cybersecurity directives, and deployments across multiple security enclaves. The role also provides tier-3 support, guides engineering standards, and evaluates emerging cloud-native and DevSecOps technologies.

The position requires U.S. citizenship and an active Secret clearance or the ability to obtain and maintain a U.S. Government Top Secret/SCI clearance. The engineer must be present in Dayton, Ohio for frequent or weekly meetings in Dayton and at WPAFB, and be able to travel up to 20% as required.

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, IT, Cybersecurity, or equivalent practical experience.
• At least 5 years of hands-on experience in software deployment, cloud platform engineering, DevOps, or DevSecOps in an enterprise or DoW environment.
• U.S. citizenship.
• Active Secret security clearance, or ability to obtain and maintain a U.S. Government Top Secret/SCI Security Clearance.
• Expert-level proficiency with AWS/AWS GovCloud, Kubernetes architecture, Docker/container runtimes, and Linux enterprise administration and scripting with Bash, Python, or Go.
• Advanced experience designing enterprise-grade GitLab CI/CD pipelines and infrastructure orchestration with Terraform.
• Active IAT Level II or IAM Level II/III certification compliant with DoD 8570/8140, such as Security+ CE, CySA+, CISSP, or CISM.
• Ability and willingness to travel up to 20% to client sites, customer locations, and industry conferences.
• Ability to be present in Dayton, Ohio for frequent or weekly meetings in Dayton and at WPAFB.

Nice To Haves

• Deep expertise in container security scanning and governance tools such as Anchore, Trivy, SonarQube, NeuVector, or Sysdig.
• Strong experience with central authentication and identity providers such as Okta, Keycloak, OIDC, or SAML.
• Experience mentoring mid-level and junior engineers on cloud-native practices, secure coding guidelines, and operational excellence.
• Strong technical writing ability to author architectural blueprints, compliance documentation, and standard operating procedures.
• Excellent communication skills, including the ability to bridge technical requirements among software development teams, product managers, and government stakeholders.
• Flexibility to support high-priority operational deployment windows or mission-critical outage resolutions.
• Direct hands-on experience with Air Force Platform One, Big Bang architecture, Iron Bank hardened container baselines, and AWS C2S/SC2S cloud environments.
• Track record assisting with or leading cATO accreditation efforts for defense or intelligence customer software applications.

Responsibilities

• Lead the architecture, design, and continuous optimization of enterprise CI/CD pipelines using GitLab CI or alternative deployment platforms.
• Architect and mature GitOps workflows using FluxCD or ArgoCD to manage multi-cluster state across complex environments.
• Establish automated testing, vulnerability gates, caching strategies, and performance benchmarks to shorten build and release cycles.
• Provide tier-3 escalation support and root-cause analysis for build, deployment, and automation pipeline failures.
• Drive technical standards, best practices, and code reviews across DevOps and DevSecOps practices.
• Architect, deploy, and maintain secure, highly available cloud-native infrastructure using AWS GovCloud and Kubernetes.
• Design scalable Infrastructure-as-Code frameworks, such as Terraform or OpenTofu, for automated provisioning of cloud, on-premises, and air-gapped environments.
• Establish containerization standards, custom Helm chart templates, and orchestration patterns across multi-tenant Kubernetes clusters.
• Lead deployment architectures and secure baseline configurations across NIPRNet, SIPRNet, JWICS, and C2S/SC2S security enclaves.
• Architect shift-left security controls in delivery workflows, including automated SAST/DAST, container scanning, SBOM generation, and dependency tracking.
• Lead compliance-as-code initiatives enforcing DoD cybersecurity directives, STIGs, and NIST SP 800-53 controls to accelerate cATO approval frameworks.
• Champion adoption of DoD Enterprise DevSecOps reference architectures, such as Platform One and Big Bang, and hardened container pipelines using Iron Bank.
• Architect observability and telemetry stacks using Prometheus, Grafana, Loki, and Jaeger for system health monitoring, alert automation, and operational insights.
• Lead disaster recovery, high availability, and business continuity strategy, including automated backup and restore procedures for Kubernetes clusters and stateful services.
• Evaluate, pilot, and introduce cloud-native and DevSecOps technologies to improve team capabilities and platform efficiency.
• Mentor engineers and collaborate with cross-functional software teams to advance platform architecture and secure delivery practices.

Benefits

• Hybrid work options.
• Flexible working hours.
• 10 paid holidays and generous paid time off (PTO).
• Employer-paid medical, dental, vision, and short- and long-term disability insurance.
• Access to group rating plans for life insurance.
• Employer contribution to a Health Savings Account (HSA).
• Competitive 401(k) employer match.
• Internal tech community events, including Lightning Talks and Integration Events, supporting professional growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior