DevSecOps Engineer III (Flight Software)

Location: Denver, CO; other locations include Huntsville, AL, the Greater Seattle Area, and Reston, VA. Relocation is provided, and travel is expected up to 15% of the time. Candidates must be U.S. citizens or nationals, current U.S. permanent residents, or lawfully admitted refugees or asylees.

Base pay for CO applicants: $150,931.00–$211,303.05 annually. Other site ranges may differ.

Company

hirify.global develops reusable, safe, and low-cost space vehicles and systems, including launch and spacecraft systems for national security missions.

What you will do

• Design, build, and operate GitLab CI/CD pipelines for flight software, covering builds, static analysis, unit testing, SIL/HIL testing, artifact promotion, and releases.
• Own secure, reproducible build systems with hardened base images, verified dependencies, signed artifacts, SBOMs, provenance, and vulnerability and license scanning.
• Sustain pipelines in classified, closed, and offline environments with mirrored registries, package repositories, offline updates, and cross-domain artifact transfer.
• Align pipelines with DoD Software Factory practices and required security controls while automating compliance evidence.
• Define CI/CD standards, manage runners and caching, automate manual build and release steps, and partner with developers, test engineers, security, and SRE.
• Support integration, test campaigns, and release readiness while mentoring Level I and II engineers.

Requirements

• Bachelor’s degree in computer science, computer engineering, electrical engineering, aerospace engineering, or a related STEM field.
• 5+ years of professional experience in DevOps, DevSecOps, or build and release engineering, ideally in secure or regulated environments.
• Hands-on experience designing and operating GitLab CI/CD pipelines, including runners, shared templates, and pipeline-as-code.
• Experience building and securing OCI container environments with Docker and Podman, including image hardening and container registry management.
• Experience generating, validating, and consuming SBOMs and securing the software supply chain.
• Strong Linux administration and security experience, scripting skills with Python and Bash, and experience with Git.
• Must be a U.S. citizen or national, current Green Card holder, or lawfully admitted refugee or asylee.

Nice to have

• Experience with minimal hardened container images, secure base-image supply chains, DoD Software Factory practices, Platform One, Iron Bank, or equivalent designs.
• Experience with classified, closed, or air-gapped pipeline environments, artifact signing, provenance, attestation, vulnerability and license scanning, and frameworks such as NIST SP 800-53, RMF, or NIST SSDF.
• Experience with C/C++ and embedded build systems such as CMake, Bazel, or Yocto; infrastructure as code and configuration management with Terraform or Ansible.
• Experience supporting flight or embedded software pipelines, including SIL or HIL testing in CI.
• Master’s degree in a related field and active TS/SCI clearance.

Culture & Benefits

• Safety, collaboration, inclusion, and a culture of problem solving.
• Medical, dental, vision, life insurance, disability coverage, paid parental leave, and up to 5% 401(k) company matching.
• Education Support Program, stock options for regular employees working at least 20 hours per week, up to four weeks of paid time off, and up to 14 company-paid holidays.
• Active clearance is highly desired but not required; it must be held or be upgradable to TS/SCI with CI poly.

Hiring process

• Interviews include a technical assessment.
• Background checks are required; additional checks may apply for roles involving military installations or other regulated duties.