DevSecOps Engineer

DevSecOps Engineer Los Angeles, California | Full time, onsite | Relocation supported We are working with a spacecraft technology company in Los Angeles that designs and builds custom satellites for government and prime contractor customers. Small engineering team, funded, with hardware already flying. This is a hands on build and own role. The role You will own the software supply chain that delivers the company's products into a hardened AWS GovCloud environment. This is the link between product engineering and the cloud platform, from a developer commit through automated build, test and security scanning, to a signed and packaged product ready for deployment. Administer GitLab and the CI/CD platform, covering runner fleets, project and group structure, pipeline configuration and application level security featuresBuild, maintain and optimise pipelines that operate inside a constrained, air gapped GovCloud networkOwn product packaging and the self service deployment path through AWS Service Catalog, so engineering teams can provision approved infrastructure safely and repeatablyBuild, scan and publish OCI container images to Amazon ECR, including cross account distributionIntegrate security tooling across the development lifecycle: SAST, DAST, SCA, secrets scanning and SBOM generationWork within a self hosted zero trust architecture and air gapped network controls alongside the platform and network security teamsSupport evidence collection and continuous monitoring for systems aligned to NIST 800-171 and 800-53Automate provisioning, configuration management and pipeline level security monitoring using Infrastructure as CodeSupport and mentor other engineers on DevSecOps practice and toolingWhat you need Degree in computer science, information technology or a similar field, or equivalent practical experienceFive or more years in a DevSecOps, DevOps or Site Reliability Engineering roleHands on AWS experience, ideally including service level work in AWS GovCloudSignificant hands on GitLab administration, covering pipeline configuration, runner management and security featuresStrong knowledge of building, securing and managing container images and workflowsProficiency with Infrastructure as Code such as CloudFormation, CDK, Terraform or HelmUS person, willing and eligible to obtain a DoD Top Secret security clearance. You do not need to hold one already, as sponsorship is availableNice to have AWS Service Catalog or Landing Zone AcceleratorPython scripting, with Go or PowerShell an advantageExperience in regulated environments building auditable, evidence generating pipelines such as SBOMs, scan reports and signing or provenanceFamiliarity with NIST 800-171 or 800-53Certifications such as AWS Security Specialty, CISSP or GitLab Certified AssociateAdvanced degree in a relevant technical fieldWhat is on offer Medical, dental and vision paid by the company for the employee, flexible vacation, 401k matching, holiday pay, and pregnancy, family and military service leave. Interview travel and relocation are covered. Full ownership of the pipeline in a team small enough that your work is visible at company level, with a fast, decisive interview process. Apply through this advert or contact me directly for a confidential conversation. Darwin Recruitment is acting as an Employment Agency in relation to this vacancy.