Description
Job Overview
You will join the Platform Engineering team as a security-focused engineer responsible for embedding security into every layer of our developer platform and software delivery pipeline.
Responsibilities
- Deploying, updating, and securing Kubernetes workloads through ArgoCD and GitOps workflows
- Building and maintaining secure CI/CD pipelines that enforce policy, scan for vulnerabilities, and produce auditable build artifacts
- Maintaining and hardening shared services (GitLab, Artifactory, container registries) that the entire organization depends on
- Implementing and enforcing security controls aligned with CMMC L2, NIST 800-171, and other frameworks required for ATO
- Securing the software supply chain: image signing, SBOM generation, dependency scanning, and provenance tracking
- Conducting threat modeling to surface architectural risks before they become incidents
- Detecting, investigating, and responding to security incidents across infrastructure and applications
- Working with product teams to ensure their workloads meet security and compliance requirements before and after deployment
- Supporting the secure hosting of ML/AI workloads, including model training environments and sensitive data handling
Requirements
- 5+ years of experience in DevSecOps, security engineering, or infrastructure engineering with a security focus
- Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field
- Deep experience with Kubernetes - deployment, networking, RBAC, pod and cluster security, and operational troubleshooting
- Proficiency with ArgoCD or similar GitOps tooling for managing Kubernetes workloads at scale
- Strong experience writing and maintaining Helm charts
- Proficiency in Python and Bash, with experience automating security and compliance workflows
- Understanding of software supply chain security, including container image hardening, FIPS-validated cryptography, vulnerability scanning, SBOM, and artifact signing
- Hands-on experience implementing security controls from frameworks like NIST 800-171, NIST 800-53, or CMMC
- Comfortable with CI/CD pipeline design, particularly building in security gates, policy-as-code, and automated compliance checks
- Working knowledge of AWS and ability to collaborate effectively on infrastructure decisions
- U.S. citizenship required
Nice to Have
- Experience with Go or other systems programming languages
- Experience shepherding systems through an ATO process
- Familiarity with DISA STIGs and the Risk Management Framework (RMF)
- Familiarity with Terraform and infrastructure-as-code for cloud resources
- Experience with Nix or NixOS
- Experience with SIEM platforms (e.g., Elastic) and security monitoring/incident response
- Experience securing and deploying ML/AI workloads , GPU environments, training pipelines, data classification
- Red teaming or penetration testing experience
- Certifications such as CKS, Security+, or CISSP
- Experience in defense, intelligence, or other regulated environments
Benefits
- A focus on outcomes, not time-tracking
- A generous compensation and benefits package (in addition to base salary) that includes, but may not be limited to, insurance coverage (medical and travel), flexible paid time off, paid holidays, and remote and/or hybrid work available depending on position.