DevSecOps Engineer

webAI, Inc.•Austin, TX

34d

About The Position

We are seeking a DevOps/Compliance Engineer to support our Public Sector initiatives by building, securing, and maintaining compliant infrastructure environments for deploying AI models within government and regulated systems. This role bridges modern DevOps practices with the strict compliance and security standards required for federal engagements. You will play a critical role in designing infrastructure automation, ensuring FedRAMP and NIST compliance, and helping deliver secure, auditable, containerized AI solutions to our public sector partners.

Requirements

Active US Security clearance or eligibility and willingness to obtain a US Security clearance
5+ years of experience in DevOps, Site Reliability, or Infrastructure Engineering.
Proficiency with Docker, Kubernetes, and cloud-native deployment tools.
Strong experience implementing Infrastructure as Code with Terraform, Ansible, or Pulumi.
Deep understanding of security and compliance frameworks such as NIST SP 800-53, FedRAMP, and DISA STIGs.
Experience with MLOps tools and practices for automating and scaling model deployments.
Proficiency in Python, Bash, or Go for automation and scripting.
Experience integrating security controls into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, etc.).
Familiarity with observability tools such as Prometheus, Grafana, ELK, or CloudWatch.

Nice To Haves

Experience working within FedRAMP Moderate or High environments.
Familiarity with AI model deployment pipelines and model governance best practices.
Knowledge of Zero Trust architecture and secure identity management.
Strong collaboration skills and ability to work cross-functionally across technical, security, and compliance teams.
Excellent written and verbal communication skills for interfacing with government stakeholders and auditors.

Responsibilities

Design, implement, and maintain scalable, secure cloud and edge infrastructure for AI workloads in government environments.
Manage containerization and orchestration technologies such as Docker and Kubernetes, optimizing for performance, isolation, and compliance.
Develop and maintain Infrastructure as Code (IaC) using Terraform, Ansible, or Pulumi to automate secure, compliant infrastructure provisioning.
Implement and manage CI/CD pipelines with integrated security controls, encryption, and vulnerability scanning.
Ensure compliance with federal security frameworks such as NIST SP 800-53, FedRAMP, and DISA STIGs.
Collaborate with Security, Legal, and Public Sector teams to maintain continuous compliance posture and generate audit-ready evidence.
Package and deliver software artifacts (containers, binaries, configurations) for deployment in restricted or air-gapped environments.
Configure and maintain monitoring, logging, and observability tools to ensure system reliability and compliance visibility.
Support MLOps workflows to productionize AI models with consistent, secure automation.
Contribute to documentation and knowledge sharing on infrastructure and compliance best practices.