DevSecOps PE Engineer II

Sierra Nevada Corporation•Plano, TX

22h•Hybrid

About The Position

The ISR (Intelligence, Surveillance & Reconnaissance), Aviation, and Security (IAS) business area is a leader in ISR and aviation, it is a leading prime manned and unmanned aircraft systems integrator for innovative, high-performance ISR and aviation systems. Its end-to-end Command, Control, Computers, Communications and Intelligence, Surveillance & Reconnaissance (C4ISR) capabilities encompass design, integration, test, certification, ground/flight training and complete logistics support. IAS tailors solutions to customer cost, performance, and schedule requirements and designs to consistently exceed expectations – with an unrivaled record of on time and on (or under) budget deliveries. SNC has led thoughtful and disruptive change in the aerospace and defense industry for the past 60 years and now, we’re applying this tenacity and expertise to the U.S. Air Force’s (USAF) Survivable Airborne Operations Center (SAOC) mission. Join the SNC-led SAOC team and be a part of exciting and meaningful work to modernize and deliver the next-generation SAOC aircraft trusted by the President, Secretary of Defense and Chairs of the Joint Chiefs of Staff to ensure continued critical command, control and communication during national emergencies. If you’re passionate about building the airborne command post of the future, consider SNC for your next mission. Learn more about NC3 and SAOC here . Are you looking to use your engineering capabilities, project management and collective skills in your next position? We could use your expertise on our team! The DSOP / Tooling / CI-CD Project Engineer II is responsible for the technical leadership and program management of DevSecOps platform development, software toolchain integration, and continuous integration/continuous delivery (CI/CD) pipeline engineering efforts. This role bridges the gap between software development teams, platform/infrastructure stakeholders, and program management — driving the build, deployment, and sustainment of automated software delivery pipelines in classified and unclassified environments. The DevSecOps PE ensures tooling solutions meet program requirements for security, compliance, scalability, and operational readiness.

Requirements

Bachelor's degree in Computer Science, Software Engineering, Systems Engineering, or closely related technical field.
10+ years of progressive engineering experience, including 2+ years in a technical lead or engineering project lead role.
Direct, hands-on experience designing and managing CI/CD pipelines in an enterprise or program environment (GitLab CI, Jenkins, GitHub Actions, or equivalent).
Demonstrated experience with container orchestration platforms — specifically Kubernetes and Docker — in a production or program-of-record context.
Working knowledge of Infrastructure-as-Code tools (Terraform, Ansible, Helm, or equivalent) used operationally.
Practical experience integrating automated security tooling (SAST, DAST, SCA, image scanning) into CI/CD workflows.
Experience with artifact management and software supply chain security (Artifactory, Nexus, SBOM generation).
Familiarity with RMF/ATO processes and how DevSecOps pipelines interface with accreditation requirements.
Experience creating and managing project schedules, tracking technical tasks, and reporting status to program and customer leadership.
Excellent written and verbal communication skills, with ability to explain complex pipeline and tooling concepts to non-technical stakeholders.

Nice To Haves

4–6 years of DevSecOps platform leadership, engineering program management, or software project engineering experience.
Active DoD Top Secret clearance with SCI Eligibility.
Background in Aerospace & Defense programs with classified environment tool deployment (IL4/IL5/IL6, SIPR, or JWICS experience).
Experience with GitOps workflows and policy-as-code frameworks (OPA, Kyverno).
Familiarity with Platform One (P1), Iron Bank, or DoD-hardened container registries.
CMMC Level 2/3 implementation experience or direct involvement in ATO package development.
PMP, CSEP, or relevant cloud/DevOps certifications (CKA, AWS DevOps Pro, GitLab Certified, etc.).
Knowledge of software factory architectures and experience scaling CI/CD to multi-team, multi-repo programs.
Experience leading a multi-disciplinary design and development team and communicating with program management and customers.
Familiarity with preparation and development of project estimates, technical proposals, and program cost and schedule management.
Past history of leading baseline definition and maturation in a complex development setting, including the use of highly integrated trade studies and analysis of alternative.
Ability to read and interpret technical drawings and schematics, parts lists, specifications, instructions and test procedure.
Experience or certification in International Council on Systems Engineering (INCOSE) standard.
Background in the Aerospace and Defense Industry.

Responsibilities

Develop and manage detailed project plans, sprint/release schedules, and budgets for DSOP and tooling initiatives.
Manage cross-functional delivery teams comprising software engineers, platform engineers, and security specialists.
Track delivery milestones, manage backlog priorities, and communicate status to program and customer stakeholders.
Architect, implement, and oversee CI/CD pipelines supporting automated build, test, security scanning, and deployment workflows.
Define and enforce DevSecOps standards including SAST/DAST integration, software composition analysis (SCA), and container image scanning.
Lead selection, procurement, integration, and maintenance of software toolchains (e.g., GitLab, Jenkins, Artifactory, SonarQube, Jira, Confluence, Kubernetes).
Oversee platform-as-code practices including infrastructure-as-code (IaC), configuration management, and environment-as-code.
Ensure pipelines and tooling comply with NIST 800-53, CMMC, RMF, and applicable cyber security frameworks.
Support accreditation activities (ATO processes) by documenting pipeline controls and providing technical evidence to ISSO/ISSM.
Serve as the primary technical point of contact for customers and end-users regarding DevSecOps capabilities and tooling roadmaps.
Facilitate tool onboarding, developer enablement, and adoption efforts across multiple program teams.
Present pipeline maturity metrics, deployment velocity, and quality gate status at program reviews.
Prepare comprehensive status reports covering pipeline health, tool availability, delivery throughput, security posture, and open risks.
Maintain dashboards and metrics that reflect DORA metrics (deployment frequency, lead time, MTTR, change failure rate).
Identify systemic pipeline failures, tool integration bottlenecks, or security compliance gaps and develop rapid resolution plans.
Own the DSOP Risk Register — document toolchain risks, supply chain software risks, and dependency vulnerabilities.
Develop contingency strategies for pipeline outages, tool end-of-life transitions, and accreditation gaps.
Drive continuous improvement of pipeline speed, quality gate effectiveness, and developer experience.
Evaluate and pilot emerging DevSecOps tools and practices; present cost-benefit analyses to leadership.
Lead shift-left security initiatives and coach development teams on secure coding and automated testing practices.
Develop and manage risk identification, documentation, and mitigation planning.