DevSecOps Engineer

I2X Technologies is a reputable technology services company to the Federal Government. Whether the focus is on space exploration national security cyber security or cutting-edge engineering applications I2X is ready to offer you the chance to make a real-world impact in your field and for your country. We provide long-term growth and development. Headquartered in Colorado I2X is engaged in programs across the country and in more than 20 states. Our programs support multiple Federal agencies the Department of Defense and often focused on the space initiatives of our government customers.

I2X Technologies is looking for a sharpDevSecOps Engineer to join our growing team in Boulder CO.

In this fully onsite role be part of a small fast-moving program team supporting aclassified space portfolio. You will utilize DevSecOps practices across multiple projects architect secure-by-design solutions and build and maintain robust CI/CD pipelines and infrastructure that meet stringent mission and security requirements. This role is ideal for a self-starter who is comfortable coding automating and collaborating across engineering cybersecurity and operations teams.

Responsibilities:

• Participate in DevSecOps initiatives across multiple enclaves and projects for secure software and infrastructure delivery
• Design implement and maintain secure cloud and on-prem environments using Infrastructure as Code toolsets such as Terraform Ansible CloudFormation or Pulumi
• Design build and operate automated CI/CD pipelines (e.g. GitLab CI GitHub Actions Azure DevOps Jenkins) with integrated security controls including SAST DAST SCA container image scanning and secret management
• Implement harden and manage containerized workloads using Docker and Kubernetes (including RKE2 OpenShift or Rancher) leveraging Helm Kustomize and umbrella charts to deploy and manage complex multi-service systems
• Provide Linux systems administration on Red Hat Enterprise Linux including troubleshooting issues across storage operating systems applications and networks in classified or mission-critical environments
• Integrate security into the SDLC by enforcing secure coding practices performing code and pipeline reviews on DevSecOps and application security principles (including OWASP Top 10)
• Establish and maintain observability capabilities (logging metrics tracing alerting) to support reliability incident response and performance monitoring for mission systems
• Identify prioritize and drive remediation of vulnerabilities across applications containers hosts and infrastructure in alignment with NIST controls and DoD DevSecOps guidance
• Implement and maintain DAST and SAST tools in coordination with ISSOs system security engineers and development teams to support RMF Assessment and Authorization (A&A) efforts and continuous monitoring
• Utilize and manage binary registries (e.g. Artifactory Harbor Docker Registry Nexus) and package repositories in secure environments ensuring compliance with program policies and security baselines
• Support and enhance compliance- and policy-as-code solutions (e.g. OPA Conftest Checkov) to enforce security baselines configuration standards and deployment guardrails across Kubernetes cloud and IaC artifacts
• Collaborate with systems engineering cybersecurity operations and vendor teams to ensure software and infrastructure designs meet security performance availability and accreditation requirements
• Support and contribute to program documentation and security artifacts including architecture and deployment documentation security plans DevSecOps process documentation and material for technical reviews and readiness events
• Work with Product Owners and Scrum Masters to translate security and DevSecOps requirements into actionable user stories and tasks; support Agile ceremonies and iterative delivery of secure capabilities
• Drive continuous improvement in automation tooling and processes to increase deployment frequency reduce change failure rates and strengthen the overall security posture of the program.

• Active DoDSecret clearance with ability and willingness to obtain/maintainTS/SCI
• 6 years of experience with additional education training and certifications able to count towards total years of experience
• Bachelors degree or additional years of experience in lieu of a degree
• Professional software/DevSecOps experience in mission-critical defense space or aerospace environments; familiarity with DoD DevSecOps Agile & NIST controls
• Strong Linux (RHEL) administration and scripting skills(BashPython) including system hardening automation and troubleshooting across storage OS application and network layers
• Hands-on experience with containers and orchestration (Kubernetes with RKE2 OpenShift or Rancher) and managing binary/container registries (Artifactory Docker Registry Harbor Nexus)
• Expertise in DevOps/DevSecOps practices: CI/CD pipeline design and operation integrating security controls (SAST DAST SCA container scanning secret management) and secure SDLC implementation
• Advanced Infrastructure as Code and cloud skills: Terraform Ansible CloudFormation building and managing AWS/Azure/GCP environments with monitoring/observability
• Experience with test automation and GitLab CI/CD or similar CI/CD platforms
• Experience with configuration management and maintaining traceability between software baselines infrastructure code and DevSecOps artifacts
• Experience with virtualized hosts and platforms (e.g. VMware)
• Basic network understanding and diagnostics including TCP/IP routing firewalls and VPNs

Desired Experience and Skills

• Prior experience supportingclassified spaceor defense programs
• Experience supporting AI/ML application infrastructure and associated data pipelines in secure environments
• Relevant certifications such as: Cloud: AWS/Azure/GCP Architect or DevOps Engineer DevOps/DevSecOps: Kubernetes (CKA/CKS) CI/CD tooling certifications Security: CISSP CCSP CSSLP Security or equivalent
• Experience with policy-as-code and compliance-as-code solutions (e.g. OPA Conftest Checkov)
• Experience in Python and associated frameworks plus Git-based workflows and collaboration tools

Essential Requirements:

• US Citizenship is required
• Active DoDSecret clearance with ability and willingness to obtain/maintainTS/SCI

Additional Information:
In compliance with Colorados Equal Pay for Equal Work Act the annual base salary range for this position is listed. Please note that the salary information is a general guideline only. I2X Technologies considers factors such as (but not limited to) scope and responsibilities of the position candidates work experience education/training key skills internal peer equity as well as market and business considerations when extending an offer.

Physical Demands:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job with or without reasonable accommodation.

While performing the duties of this job the employee will regularly sit walk stand and climb stairs and steps. May require walking long distance from parking to work station. Occasionally movement that requires twisting at the neck and/or trunk more than the average person squatting/ stooping/kneeling reaching above the head and forward motion will be required. The employee will continuously be required to repeat the same hand arm or finger motion many times. Manual and finger dexterity are essential to this position. Specific vision abilities required by this job include close distance depth perception and telling differences among colors. The employee must be able to communicate through speech with clients and public. Hearing requirements include conversation in both quiet and noisy environments. Lifting may require floor to waist waist to shoulder or shoulder to overhead movement of up to 20 pounds. This position demands tolerance for various levels of mental stress.

I2X Technologies does not discriminate and the company provides equal employment opportunity for all employees and applicants without regard to race religion color sex gender sexual orientation national origin citizenship status age marital status pregnancy or parenthood handicap or disability genetics veteran status or any other legally protected characteristic.

I2X Technologies adheres to all federal state and local laws regarding equal employment opportunity and will not discriminate against you in violation of these laws. I2X Technologies reserves the right to apply CIRI Shareholder preference to qualified Shareholders in employment and advancement opportunities.

I2X Technologies participates in E-Verify. We will provide the Social Security Administration (SSA) and if necessary the Department of Homeland Security (DHS) with information from each new employees Form I-9 to confirm work authorization.

Reasonable Accommodation:

I2X Technologies will provide reasonable accommodations according to applicable state and federal laws to all qualified individuals with physical or mental compliance with the ADA Amendments Act (ADAAA) if you have a disability and would like to request an accommodation in order to apply for a position with I2X Technologies please email