DevSecOps Engineer

A DevSecOps engineer on Air's engineering team who secures, operates and continuously deploys the company's software into US government-accredited FedRAMP and IL5 environments for defence and intelligence customers. The engineer adds security tools and scans to CI/CD and fixes what they find, helps engineers turn security requirements into control implementations, writes SSPs, architecture diagrams and other evidence, keeps architectures within the scope of the ATO as the security subject-matter expert, and builds CI/CD infrastructure on GitLab, Jenkins, Helm and Kubernetes.

Air wants US citizenship, a technical degree, Linux and scripting skills, hands-on cloud operations, CI/CD and infrastructure-as-code experience, monitoring tools such as Splunk or Grafana, and knowledge of FedRAMP, FISMA, DoD SRG or NIST 800-171. Based in the Pittsburgh office, with up to 10 percent travel.