DevSecOps Engineer

Title:

Belong. Connect. Grow. with KBR!

KBR provides innovative and cost-effective services and solutions to national security and industry customers. We are leading the way for national security and commercial space integration developing innovative solutions to tomorrows challenges today. This position supports the Strategic and Long-Range Communications Group at MIT Lincoln Laboratory.

We are seeking a DevSecOps Engineer to contribute to the design development implementation and testing of software for a series of large-scale communications system demonstrations. Work will be performed in a disciplined collaborative environment employing modern programming practices.A hybrid work location possible for this services shall be provided in support of several Laboratory and Government test sites.

Why Join Us

• Innovative Projects: Enable critically important communications over vast distances by being the team member to innovate and overcome technical challenges as we spearhead new solutions through advanced prototyping.
• Collaborative Environment: Come join a team of enthusiastic engineers engaged in creating the next generation of cutting-edge laser communication systems technology.
• Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense and/or defense.

Key Responsibilities:

• Serve as the DevSecOps subject-matter expert and architectural authority
• Define standards reference architectures and best practices used across teams
• Design and implement secure scalable and highly available cloud and hybrid platforms
• Embed security controls directly into:
• CI/CD pipelines
• Infrastructureascode
• Container platforms and deployment workflows
• Evaluate select and integrate DevSecOps tooling including
• SAST DAST SCA
• Secrets management encryption and identity integration
• Container security
• Lead implementation of containerized platforms (Docker Kubernetes OpenShift etc.)
• Integrate identity access management secrets management and encryption into pipelines and platforms
• Troubleshoot complex system pipeline and security issues across environments
• Act as a trusted technical advisor to engineering security and platform teams
• Mentor engineers and elevate DevSecOps maturity across the organization
• Lead technical reviews architecture discussions and root cause analyses
• Communicate risk tradeoffs and recommendations clearly to technical and non-technical leadership
• Actively maintain security vulnerability assessment databases for third-party application dependency scans and operating system level scans
• Actively monitor GitLab Security Dashboards for new vulnerabilities detected in software products and work with developers to remediate
• Maintain and enforce compliance frameworks across projects
• Maintain the software release pipeline
• Ensure base container images are regularly updated to include latest security patches and updates

Work Environment:

• Location:On-site at MIT LL in Lexington MA. Hybrid possible.
• Travel Requirements:Willing and able to travel (up to 10% typically CONUS)
• Working Hours:Standard

Required Qualifications:

• Security Clearance: Secret
• Education: Bachelors in Computer Science Computer Engineering Electrical Engineering or related field
• Work Experience: 5 to 10 years of experience in software development systems engineering platform engineering or DevOps roles
• Containerization Technologies: Expert level experience building container images with Podman Docker Kaniko Skopeo. Familiarization with Universal Base Images (UBI). Familiarization with k3s and k8s desired.
• GitLab CI/CD: Expert-level experience building and optimizing build pipelines. To include use of CI templates or CI components.
• Security Integration: Proficiency in implementing security scan execution policies and pipeline security scans. Familiar with Trivy Semgrep and Gemnasium (or other SBOM based dependency scans).
• Software Proficiency: Expert-level experience with package managers for Java Python and Node.
• Operating Systems: Proficient with Red Hat Enterprise Linux 8.10 or higher.

Basic Compensation:
For MA only the salary range is approximately $126900 - $190400 USD annually. The offered rate will be based on the selected candidates knowledge skills abilities and/or experience and in consideration of internal parity.

Ready to Make a Difference
If youre excited about making a significant impact in the field of space defense and working on projects that matter we encourage you to apply and join our team at KBR. Lets shape the future together.

Belong Connect and Grow at KBR

At KBR we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to and ongoing journey toward being a People First company. That commitment is central to our team of teams philosophy and fosters an environment where everyone can Belong Connect and Grow. We Deliver Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religion disability sex sexual orientation gender identity or expression age national origin veteran status genetic information union status and/or beliefs or any other characteristic protected by federal state or local law.