Senior DevSecOps Engineer

University of Dayton•Dayton, OH

3d•Onsite

About The Position

UDRI is seeking a DevSecOps Engineer to join the SPIRE group and contribute to a growing team responsible for development, security, operations, and development workflows supporting secure, scalable AI systems. The role utilizes, manages, and develops DevSecOps infrastructure and tools, primarily for systems built on Kubernetes. The engineer supports existing systems and develops new systems for the needs of AI research, working directly with project leadership, scientists, and engineers to develop, document, and maintain technical solutions across multiple advanced technology areas. The position requires occasional domestic travel for customer engagements, project activities, and on-site collaboration. It is performed on-premises at the assigned work location in Dayton, Ohio. This is a full-time, benefit-eligible position.

Requirements

Bachelor's degree in Computer Science, Computer Engineering, or a related field.
At least 7 years of professional experience in software engineering, systems administration, or DevSecOps, including at least 3 years in a dedicated DevSecOps, DevOps, SRE, or platform engineering role.
Secret security clearance.
Advanced Docker experience, including writing and optimizing Dockerfiles using multi-stage builds, minimal base images, and layer caching, and setting container standards across teams.
Experience designing, deploying, and operating production container orchestration platforms such as Kubernetes, including scaling, upgrades, RBAC, and troubleshooting complex workload issues, as well as Docker Compose.
Experience designing, implementing, and maintaining CI/CD pipelines that promote software through development, test, and production environments, including automated testing, security validation, and controlled release processes.
Strong Linux administration skills and scripting or programming experience in Bash, Python, Go, or a similar language.
Experience with Agile methodologies and practices, including sprint planning, backlog management, and iterative software delivery.
Experience leading technical projects from planning through delivery, including scoping work, setting timelines, and coordinating across teams.
Experience breaking down work and delegating tasks to engineers based on their strengths and growth goals.
Track record of mentoring junior and mid-level engineers through code reviews, pairing, and knowledge sharing, and setting team standards for branching strategy and code review.
Effective written and verbal communication skills.
Effective interpersonal skills.
Must be a U.S. citizen due to requirements of research contracts with the U.S. federal government.

Nice To Haves

Graduate degree in Computer Science, Computer Engineering, or a related field.
CompTIA Security+ or higher certification.
TS/SCI clearance, or eligibility for TS/SCI or TS/SAP.
Relevant certifications such as CKA, CKS, or an AWS/Azure professional-level certification.
Extensive experience with GitLab CI and Dagger, including building reusable pipeline templates and components shared across teams.
Experience administering JFrog Artifactory and software assurance tools such as JFrog Xray, including integrating artifact scanning into CI/CD pipelines.
Experience authoring and maintaining Helm charts or Kustomize configurations for multiple services.
Experience designing monitoring, logging, and alerting for production systems using tools such as Prometheus and Grafana.
Strong understanding of networking, including DNS, load balancing, TLS, firewalls, VPCs, and subnets.
Experience managing configuration at scale with tools such as Ansible.
Background in security and compliance practices, including image scanning, secrets management such as Vault, policy enforcement, and supply chain security.
Experience with Azure and its DevOps pipelines.
Experience with cloud cost optimization and capacity planning.
Experience leading incident response and running blameless postmortems.
Strong experience administering Red Hat Enterprise Linux (RHEL), including package management, SELinux, and system hardening.
Experience with Java, C++, and Python, including building, testing, and packaging applications in CI/CD pipelines using tools such as Maven or Gradle, CMake, and pip.
Experience working in air-gapped or disconnected environments, including mirroring container registries and package repositories, moving artifacts across security boundaries, and maintaining Kubernetes and CI/CD tooling without internet access.

Responsibilities

Utilize, manage, and develop DevSecOps infrastructure and tools for secure, scalable AI systems built primarily on Kubernetes.
Support existing systems and develop new systems to meet growing AI research needs.
Work directly with project leadership, scientists, and engineers to develop, document, and maintain technical solutions across multiple advanced technology areas.
Lead technical projects from planning through delivery, including scoping work, setting timelines, and coordinating across teams.
Break down work and delegate tasks to engineers based on their strengths and growth goals.
Mentor junior and mid-level engineers through code reviews, pairing, and knowledge sharing.
Set team standards for branching strategy and code review.
Travel occasionally within the United States for customer engagements, project activities, and on-site collaboration.