Senior DevSecOps Engineer

University of Dayton, Ohio•Dayton, OH

2d•Onsite

About The Position

UDRI is seeking a DevSecOps Engineer to join the SPIRE group. The role contributes to a growing team responsible for development, security, operations, and development workflows supporting secure, scalable AI systems, primarily built on Kubernetes. The engineer will manage and develop DevSecOps infrastructure and tools, support existing systems, and develop new systems to meet growing AI research needs. The position works directly with project leadership, scientists, and engineers to develop, document, and maintain technical solutions across multiple advanced technology areas. Occasional domestic travel is required for customer engagements, project activities, and on-site collaboration. The position is performed on premises at the assigned work location in Dayton, Ohio. This is a full-time, benefit-eligible position. UDRI describes its community as valuing integrity, diversity, and service to the greater good, and identifies its Marianist values and mission of fostering innovation and advancing knowledge as guiding principles.

Requirements

Bachelor's degree in Computer Science, Computer Engineering, or a related field.
At least 7 years of professional experience in software engineering, systems administration, or DevSecOps, including at least 3 years in a dedicated DevSecOps, DevOps, SRE, or platform engineering role.
Secret security clearance.
Advanced experience with Docker, including writing and optimizing Dockerfiles with multi-stage builds, minimal base images, and layer caching, and setting container standards across teams.
Experience designing, deploying, and operating production container orchestration platforms such as Kubernetes, including scaling, upgrades, RBAC, and troubleshooting complex workload issues, as well as Docker Compose.
Experience designing, implementing, and maintaining CI/CD pipelines that promote software through development, test, and production environments, including automated testing, security validation, and controlled release processes.
Strong Linux administration skills and scripting or programming experience in Bash, Python, Go, or a similar language.
Experience with Agile methodologies and practices, including sprint planning, backlog management, and iterative software delivery.
Experience leading technical projects from planning through delivery, including scoping work, setting timelines, and coordinating across teams.
Experience breaking down work and delegating tasks to engineers based on their strengths and growth goals.
Track record of mentoring junior and mid-level engineers through code reviews, pairing, and knowledge sharing, and setting team standards for branching strategy and code review.
Effective written and verbal communication skills.
Effective interpersonal skills.
U.S. citizenship, required due to the requirements of U.S. federal government research contracts.

Nice To Haves

Graduate degree in Computer Science, Computer Engineering, or a related field.
CompTIA Security+ or higher certification.
TS/SCI clearance or eligibility for TS/SCI or TS/SAP.
Relevant certifications such as CKA, CKS, or an AWS/Azure professional-level certification.
Extensive experience with GitLab CI and Dagger, including building reusable pipeline templates and components shared across teams.
Experience administering JFrog Artifactory and software assurance tools such as JFrog Xray, including integrating artifact scanning into CI/CD pipelines.
Experience authoring and maintaining Helm charts or Kustomize configurations for multiple services.
Experience designing monitoring, logging, and alerting for production systems using tools such as Prometheus and Grafana.
Strong understanding of networking, including DNS, load balancing, TLS, firewalls, VPCs, and subnets.
Experience managing configuration at scale with tools such as Ansible.
Background in security and compliance practices, including image scanning, secrets management (Vault or similar), policy enforcement, and supply chain security.
Experience with Azure and its DevOps pipelines.
Experience with cloud cost optimization and capacity planning.
Experience leading incident response and running blameless postmortems.
Strong experience administering Red Hat Enterprise Linux (RHEL), including package management, SELinux, and system hardening.
Experience with Java, C++, and Python, including building, testing, and packaging applications in CI/CD pipelines (e.g., Maven or Gradle, CMake, pip).
Experience working in air-gapped or disconnected environments, including mirroring container registries and package repositories, moving artifacts across security boundaries, and maintaining Kubernetes and CI/CD tooling without internet access.

Responsibilities

Manage and develop DevSecOps infrastructure and tools supporting secure, scalable AI systems built primarily on Kubernetes.
Support existing systems and develop new systems to meet the growing needs of AI research.
Develop, document, and maintain technical solutions in collaboration with project leadership, scientists, and engineers.
Lead technical projects from planning through delivery, including scoping work, setting timelines, and coordinating across teams.
Break down work and delegate tasks to engineers based on their strengths and growth goals.
Mentor junior and mid-level engineers through code reviews, pairing, and knowledge sharing.
Establish team standards for branching strategy and code review.
Travel occasionally for customer engagements, project activities, and on-site collaboration.