Staff DevOps Engineer
About The Position
Fortastra is seeking a Staff DevOps Engineer with strong cloud and DevSecOps experience to work in its Security Division at the intersection of software, cloud infrastructure, and mission security. The role architects secure CI/CD pipelines and cloud infrastructure and participates in secure design for space vehicles and ground segments. It focuses on reliability, automation, and security, helping engineers deliver quickly within defined guardrails. This is a hands-on engineering role treating infrastructure code, build pipelines, and release processes as product security controls. The engineer is expected to understand spacecraft and ground segments well enough to determine what those controls must protect. The position requires working on-site five days per week in Torrance, California. U.S. citizenship is required, as is the ability to obtain or hold an active TS/SCI clearance.
Requirements
- A security mindset, including thinking like an adversary and communicating actionable risk to engineers and leadership.
- Strong hands-on Terraform and AWS experience; experience with GovCloud or other regulated environments is preferred within this requirement.
- Experience securing CI/CD pipelines and software delivery, including scanning, signing, secrets, and supply chain security.
- Strong network security and architecture skills in cloud and hybrid environments.
- Architectural understanding of securing space systems, including the vehicle, ground segment, and links between them.
- Defense or other regulated-environment experience, with working knowledge of NIST frameworks.
- U.S. citizenship.
- Ability to obtain or hold an active TS/SCI clearance.
- Ability to work on-site five days per week in Torrance, California.
Nice To Haves
- Hands-on embedded, firmware, or flight software security experience.
- Knowledge of RF links, satellite communications, and ground station implementation.
- Experience with KMS/HSM, code signing, or PKI.
- Scripting or programming skills in Python, Go, Bash, or C/C++.
- Experience supporting classified system accreditation.
- Certifications such as CISSP, AWS Security Specialty, CCSP, or OSCP.
Responsibilities
- Own software supply chain and build integrity, including SBOMs, provenance, and artifact signing.
- Build security gates into CI/CD for flight and ground software, including static analysis, fuzzing, and vulnerability scanning.
- Own the key and signing lifecycle for builds, releases, and firmware, aligning it with command authentication and secure updates.
- Write Terraform to secure ground and mission environments in AWS GovCloud, including segmentation, IAM, and boundary controls.
- Define isolation and promotion practices for development, simulator, hardware-in-the-loop, and flight-representative environments.
- Run vulnerability triage across containers, dependencies, cloud configuration, and flight and ground code.
- Own logging and detection across pipelines, cloud, and ground systems, and extend it toward mission telemetry.
- Generate NIST 800-53 and 800-171 compliance evidence from pipeline and infrastructure state, and support classified accreditation.
- Architect secure CI/CD pipelines and cloud infrastructure and participate in secure design for space vehicles and ground segments.
- Enable reliable, automated, and secure delivery within well-defined guardrails.
Benefits
- Unlimited paid time off.
- Medical, dental, and vision coverage for employees and dependents.
- Company equity.
- 401(k) plan.
- Regular social events, team outings, and company-sponsored activities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
