DevSecOps Engineer

About the Role

Connected Logistics is seeking a DevSecOps Engineer to join a platform engineering team supporting the Department of Veterans Affairs Chief AI Office (CAIO), building and operating the cloud infrastructure, CI/CD pipelines, and containerization workflows that support AI/ML and software delivery for pilot programs. The platform runs on Azure Kubernetes Service, deployed through Pulumi (TypeScript) infrastructure-as-code and automated via GitHub Actions. You'll own the full lifecycle from reusable workflow libraries and container build pipelines to multi-tenant AKS platform operations and federal security compliance.

What You'll Get to Do as a DevSecOps Engineer

* Author and maintain a reusable GitHub Actions workflow library consumed by tenant application repositories to build, scan, and deploy

* Build and execute CI/CD pipelines that deploy a self-service platform using Pulumi (TypeScript) IaC into customer Azure environments

* Deploy and maintain cloud platform infrastructure: Azure Kubernetes Service clusters, load balancers, node pools, NSGs, and Istio service mesh

* Deploy and maintain the AI/ML platform stack, including models running on Kubernetes, Azure AI Foundry, and Azure ML Workspaces

* Containerize tenant applications using multi-stage Docker builds and deploy them to AKS through automated pipelines

* Integrate and maintain a security scanning pipeline using Semgrep (SAST), Grype (SCA), and Trivy (container image scanning) to enforce quality gates in all CI workflows

* Automate multi-tenant platform onboarding: namespace provisioning, RBAC role bindings, and virtual service creation via scripted workflows

* Set up and maintain observability infrastructure for platform and AI/ML workloads

* Collaborate with software engineers to containerize their applications for production deployment

* Follow DevSecOps best practices for security integration, IaC, SRE, and operational visibility

* Support documentation of systems, infrastructure, and automation mechanisms

* Must be a U.S. citizen to obtain VA clearance

* BS degree with 7+ years of experience

* Independent with a mindset toward continuous learning, a drive for self-study and enrichment, and resourcefulness

* Strong communication skills and customer-facing level of polish

* Able to produce lightweight but useful documentation of system design and automation mechanisms

* 5+ years of experience across the following:

* GitHub Actions CI/CD, including reusable workflow authorship

* Infrastructure-as-code using Pulumi or Terraform; Pulumi with TypeScript strongly preferred

* Container image build (multi-stage Dockerfiles), scanning, and registry management (GHCR or equivalent)

* Kubernetes cluster operations: node pools, namespaces, RBAC, health probes, resource limits, rolling deployments

* Istio service mesh: installation, VirtualService/Gateway configuration, mTLS

* Security scanning toolchain: SAST (Semgrep or equivalent), SCA (Grype/Snyk/equivalent), container vulnerability scanning (Trivy or equivalent)

* Federal application security: OWASP, Zero Trust principles, encryption at rest and in transit, FISMA High controls

* Agile delivery (Kanban, Scrum, SAFe, or similar)

* Experience with the following technology domains in a production environment:

* Azure cloud services: AKS, Azure AI Foundry, Azure ML Workspaces, Key Vault, VNet/NSG networking, Azure Blob Storage

* Pulumi (TypeScript) for end-to-end cloud resource provisioning.

* Istio service mesh installation and multi-tenant routing configuration.

* Multi-tenant Kubernetes platform operations.

* Preferred qualifications:

* Experience with GPU node pool provisioning and AI/ML workload scheduling on Kubernetes.

* Familiarity with Python (FastAPI) and Node.js/React containerization patterns.

* Prior work on a VA, DoD, or other federal FISMA High system with ATO experience.

Total Rewards Statement

We believe in fairness and clarity throughout our hiring process. The anticipated salary range for this position is $130,000.00 to $140,000.00 USD. This is a good-faith range based on factors such as your experience, geographic location, and any applicable contractual requirements, and may vary slightly.

Beyond salary, we provide a robust benefits package and encourage ongoing professional development, because your growth and well-being matter to us. We're excited to support you in building a rewarding career with us!

Connected Logistics respects the need for confidentiality for all applicants.

Connected Logistics offers an excellent benefits package that includes health, dental, vision, life, and disability insurance, a great 401(k) package, and generous Paid Time Off.

EOE/Disability/Veterans