DevSecOps Engineer (AI)

Location: Hybrid in Burlington, Massachusetts, United States. Candidates must be legally authorized to work in the United States without employer sponsorship and may need to obtain and maintain a U.S. government security clearance.

Salary: $125,000–$150,000 per year

Company

hirify.global develops AI-enabled radar and sensing systems combining advanced radar, edge computing, and AI for situational awareness in challenging environments.

What you will do

• Build, operate, assess, and secure AWS environments against security baselines, FedRAMP requirements, and related standards.
• Integrate security and compliance requirements into system architecture, CI/CD, deployment, and operational workflows with Software Engineering and AI teams.
• Support FedRAMP authorization and continuous monitoring through evidence collection, control maintenance, audit preparation, POA&Ms, and remediation tracking.
• Perform security architecture reviews, risk and gap assessments, vulnerability management, system hardening, and DISA STIG implementation.
• Implement controls across networking, Linux, IAM, encryption, logging, and security monitoring.
• Build and maintain Infrastructure as Code, CI/CD, deployment, release automation, system documentation, and developer tooling using Terraform, Pulumi, and Python.

Requirements

• 3–6 years of experience in security engineering, cloud security, DevSecOps, infrastructure security, or a related technical field.
• Hands-on AWS experience with networking, Linux, IAM, encryption, logging, vulnerability management, and security monitoring.
• Experience with security frameworks such as FedRAMP, NIST 800-53, NIST 800-171, CMMC, or RMF.
• Experience translating security and compliance requirements into technical controls alongside engineering teams.
• Hands-on experience with DevOps practices, Infrastructure as Code, source control, CI/CD pipelines, and automated deployment workflows.
• Strong problem-solving, communication, cross-functional collaboration, system hardening, vulnerability remediation, and security control lifecycle management skills.

Nice to have

• Experience supporting FedRAMP authorization, especially in a FedRAMP High environment, and familiarity with AWS GovCloud and NIST 800-53.
• Experience working with external assessors, compliance partners, or a Third-Party Assessment Organization.
• Knowledge of FIPS 140, encryption and key management, secure system boundaries, and Controlled Unclassified Information requirements.
• Experience hardening Linux systems with DISA STIGs or similar standards.
• Experience with Terraform, Pulumi, or Python automation.

Culture & Benefits

• Release Engineering owns the infrastructure, automation, and security foundation for systems delivered to government customers.
• Work spans DevOps, cloud security, release engineering, compliance, documentation, and platform reliability.
• Security and compliance are integrated into engineering workflows through automated, repeatable, and scalable practices.