D

Senior DevSecOps Engineer (AWS/GovCloud) - Spacecraft Technology

Darwin Recruitment • United State
Visa Sponsorship Relocation
Apply
AI Summary

Own the software supply chain for a spacecraft tech company, ensuring secure, automated delivery of products into a hardened AWS GovCloud environment. Administer GitLab, CI/CD pipelines, and security tooling while mentoring engineers in DevSecOps best practices. Requires hands-on AWS/GovCloud expertise, GitLab administration, and compliance with NIST 800-171/53.

Key Highlights
End-to-end ownership of secure software supply chain from developer commits to deployment in AWS GovCloud
Hands-on administration of GitLab, CI/CD pipelines, and security scanning tools (SAST, DAST, SCA, SBOM)
Work in a zero-trust, air-gapped environment with NIST 800-171/53 compliance and DoD Top Secret clearance eligibility
Key Responsibilities
Administer GitLab and CI/CD platform, including runner fleets, pipeline configuration, and security features
Build, maintain, and optimize CI/CD pipelines within a constrained, air-gapped AWS GovCloud network
Own product packaging and self-service deployment via AWS Service Catalog for secure, repeatable infrastructure provisioning
Integrate security tooling (SAST, DAST, SCA, secrets scanning, SBOM generation) into the development lifecycle
Work within a zero-trust architecture and air-gapped network controls, supporting NIST 800-171/53 compliance
Automate provisioning, configuration management, and pipeline-level security monitoring using Infrastructure as Code
Mentor and support other engineers in DevSecOps practices and tooling
Technical Skills Required
Amazon Web Services (AWS) GitLab Infrastructure as Code (CloudFormation, Terraform, CDK, Helm)
Benefits & Perks
Medical, dental, and vision coverage
Flexible vacation and 401k matching
Full relocation and interview travel support
Nice to Have
AWS Service Catalog or Landing Zone Accelerator experience
Python scripting (with Go or PowerShell as advantage)
Experience in regulated environments (e.g., SBOMs, scan reports, signing/provenance)
Certifications such as AWS Security Specialty, CISSP, or GitLab Certified Associate

Job Description


DevSecOps Engineer
Los Angeles, California | Full time, onsite | Relocation supported

We are working with a spacecraft technology company in Los Angeles that designs and builds custom satellites for government and prime contractor customers. Small engineering team, funded, with hardware already flying. This is a hands on build and own role.

The role

You will own the software supply chain that delivers the company's products into a hardened AWS GovCloud environment. This is the link between product engineering and the cloud platform, from a developer commit through automated build, test and security scanning, to a signed and packaged product ready for deployment.

  • Administer GitLab and the CI/CD platform, covering runner fleets, project and group structure, pipeline configuration and application level security features
  • Build, maintain and optimise pipelines that operate inside a constrained, air gapped GovCloud network
  • Own product packaging and the self service deployment path through AWS Service Catalog, so engineering teams can provision approved infrastructure safely and repeatably
  • Build, scan and publish OCI container images to Amazon ECR, including cross account distribution
  • Integrate security tooling across the development lifecycle: SAST, DAST, SCA, secrets scanning and SBOM generation
  • Work within a self hosted zero trust architecture and air gapped network controls alongside the platform and network security teams
  • Support evidence collection and continuous monitoring for systems aligned to NIST 800-171 and 800-53
  • Automate provisioning, configuration management and pipeline level security monitoring using Infrastructure as Code
  • Support and mentor other engineers on DevSecOps practice and tooling

What you need

  • Degree in computer science, information technology or a similar field, or equivalent practical experience
  • Five or more years in a DevSecOps, DevOps or Site Reliability Engineering role
  • Hands on AWS experience, ideally including service level work in AWS GovCloud
  • Significant hands on GitLab administration, covering pipeline configuration, runner management and security features
  • Strong knowledge of building, securing and managing container images and workflows
  • Proficiency with Infrastructure as Code such as CloudFormation, CDK, Terraform or Helm
  • US person, willing and eligible to obtain a DoD Top Secret security clearance. You do not need to hold one already, as sponsorship is available

Nice to have

  • AWS Service Catalog or Landing Zone Accelerator
  • Python scripting, with Go or PowerShell an advantage
  • Experience in regulated environments building auditable, evidence generating pipelines such as SBOMs, scan reports and signing or provenance
  • Familiarity with NIST 800-171 or 800-53
  • Certifications such as AWS Security Specialty, CISSP or GitLab Certified Associate
  • Advanced degree in a relevant technical field

What is on offer

Medical, dental and vision paid by the company for the employee, flexible vacation, 401k matching, holiday pay, and pregnancy, family and military service leave. Interview travel and relocation are covered. Full ownership of the pipeline in a team small enough that your work is visible at company level, with a fast, decisive interview process.

Apply through this advert or contact me directly for a confidential conversation.

Darwin Recruitment is acting as an Employment Agency in relation to this vacancy.


Similar Jobs

Explore other opportunities that match your interests

Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Not Applicable

Nagarro

United State

Azure DevOps Architect

Devops
•
19h ago
Visa Sponsorship Relocation Remote
Job Type Contract
Experience Level Mid-Senior level

xaxis solutions

United State
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Associate

Visionary Innovative Technolog...

United State

Subscribe our newsletter

New Things Will Always Update Regularly