DevSecOps Engineer III

BLUE ORIGIN

. Design, build, and operate GitLab CI/CD pipelines for flight software across build, static analysis, unit, SIL, HIL, artifact promotion, and release stages .

Posted 11/5/2026full-timeUnited StatesMid-LevelSenior💰 $150,931 - $230,513 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and operating GitLab CI/CD pipelines, securing software supply chains, and managing build systems in compliance with DoD practices. Proficient in scripting, Linux systems administration, and vulnerability scanning to ensure secure and efficient software delivery.

Highest-signal resume keywords

GitLab CI/CD Pipeline DesignSoftware Supply Chain SecurityLinux Systems AdministrationScripting in Python and BashVulnerability Scanning

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

GitLab CI/CDOCI Container EnvironmentsSoftware Bills of Materials (SBOM)DockerPodmanC/C++ Build SystemsInfrastructure as CodeConfiguration ManagementArtifact SigningVulnerability Scanning

Soft Skills

MentoringCollaborationProblem-Solving

Tools & Technologies

TerraformAnsibleCMakeBazelYocto

Certifications & Qualifications

Active TS/SCI Clearance

Industry Keywords

DoD Software Factory PracticesNIST SP 800-53RMFNIST SSDFSIL TestingHIL Testing

Tech Stack

Tools & technologies

AnsibleDockerLinuxPythonTerraformTypeScriptC++

About the role

Key responsibilities & impact

Design, build, and operate GitLab CI/CD pipelines for flight software across build, static analysis, unit, SIL, HIL, artifact promotion, and release stages
Own secure build systems, including reproducible builds, hardened minimal base images, pinned and verified dependencies, and signed artifacts
Generate, validate, and retain SBOMs and provenance for every release
Run vulnerability and license scanning and drive findings to closure
Build and sustain pipelines in classified, closed, and offline environments, including mirrored registries, package repositories, offline update paths, and cross-domain artifact transfer
Align pipelines with DoD Software Factory practices and required security controls while producing compliance evidence
Define CI/CD standards and best practices covering branching, merge gating, runner management, and caching
Automate manual build, test, and release steps
Partner with flight software developers, test engineers, systems security, and SRE
Secure compute, storage, and network resources and resolve cross-boundary issues
Represent the team's infrastructure needs
Mentor and peer-coach Level I and II engineers
Support integration, test campaigns, and release readiness activities

Requirements

What you’ll need

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Aerospace Engineering, or a related STEM field
5+ years of professional experience in DevOps, DevSecOps, or build and release engineering
Hands-on experience designing and operating GitLab CI/CD pipelines, including runners, shared templates, and pipeline-as-code
Experience building and securing OCI container environments using Docker and Podman
Experience generating, validating, and consuming software bills of materials (SBOMs)
Experience securing the software supply chain
Strong Linux systems administration and security experience
Scripting skills such as Python and Bash
Experience with Git version control
Must be a U.S. citizen or national, U.S. permanent resident, or lawfully admitted into the U.S. as a refugee or granted asylum
Active clearance is highly desired but not required; TS/SCI with CI poly or upgradable to it
Preferred: experience with minimal hardened container images and secure base-image supply chains
Preferred: experience with DoD Software Factory practices or reference platforms such as Platform One and Iron Bank
Preferred: experience with classified, closed, or air-gapped environments
Preferred: experience with artifact signing, provenance, attestation, vulnerability scanning, and license scanning
Preferred: experience with C/C++ build systems and embedded toolchains such as CMake, Bazel, or Yocto
Preferred: experience with infrastructure as code and configuration management such as Terraform or Ansible
Preferred: familiarity with NIST SP 800-53, RMF, or NIST SSDF
Preferred: experience supporting flight or embedded software pipelines, including SIL or HIL testing
Preferred: master's degree in a related field
Preferred: active TS/SCI clearance
Travel expected up to 15% of the time
Interviews will include a technical assessment

Benefits

Comp & perks

Relocation provided
Medical, dental, and vision insurance
Basic and supplemental life insurance
Paid parental leave
Short- and long-term disability
401(k) with company match of up to 5%
Education Support Program
Stock options for all regular employees working at least 20 hours/week
Up to four weeks of paid time off per year based on weekly scheduled hours
Up to 14 company-paid holidays
Potential benefits and bonuses based on role type, job level, individual contributions, and company discretion