Senior DevSecOps Engineer – Mission Solutions

About the role

Integer Technologies is hiring a Senior DevSecOps Engineer for Mission Solutions, a newly created role that owns the shared build, test, security, and release platform behind our digital engineering and unmanned systems programs. You will turn practices that work on one program into common capabilities that every program can use, so engineers spend their time on mission software instead of rebuilding pipelines. 

Our approach is to standardize the capability and the control, and let the implementation vary where mission constraints require it. Programs differ: cloud and GovCloud, Integer-owned infrastructure, customer systems, vehicles and edge hardware, and disconnected or air-gapped sites. The platform you build must hold a common minimum bar for review, testing, security, and traceability across all of them, without getting in the way of work that has to run in the field. 

You will drive the infrastructure and pipelines that deliver our software to customers, and you will be accountable for the security and stability of that system so that product assurance is continuous: every change is built, tested, scanned, and traceable before it reaches a customer, and stays that way after it ships. 

You will build on existing foundations rather than start from nothing, and much of the value is in connecting them, making them enforceable, and measuring them. Our tooling is not fixed: we may move between CI/CD and work-management platforms (for example Azure DevOps, the Atlassian suite, or AWS developer tools), so we value engineers who design around portable practices rather than one vendor. You will be the first person whose full-time job is to do that. This is a hands-on engineering role with real ownership. You will work directly with software engineers, researchers, and program leads, set standards through working examples rather than mandates, and document decisions so the next engineer can follow them. You will work closely with a QA engineer and a security-focused developer as those roles are filled. 

What you'll do

• Own the shared delivery platform. Design, build, and maintain reusable pipeline templates, build agents and runners, and branch policies, and bring repositories onto them so that programs share one maintained standard instead of forked copies. Keep the design portable across CI/CD and work-management platforms so a tooling change does not mean a rewrite. 

• Drive the infrastructure behind customer pipelines. Own the infrastructure that builds and delivers software to customers, on cloud, GovCloud, and Integer-owned systems: build and artifact infrastructure, environments, secrets, access, and capacity. Make customer delivery repeatable, auditable, and recoverable. Automate build, test, and end-to-end validation. Keep build and test automatic and reproducible, and run end-to-end validation on a schedule and on demand. Partner with QA to make each stage a real test with its own pass or fail, and make test results trustworthy enough to gate releases. 

• Secure the software supply chain. Operate vulnerability, secret, license, and misconfiguration scanning; generate and store SBOMs; define severity-based release gates; harden base images; and control the package sources developers install from. Move toward signed, traceable artifacts. Make vulnerability management work. Assess current scan results with each team and support remediation to compliance. Help establish owners, severity-based remediation timelines, and an exceptions process, working with the security-focused developer on risk decisions. 

• Automate release and deployment. Replace manual image creation, release selection, and installation with repeatable, verifiable deployment to cloud, GovCloud, vehicle, edge, and disconnected targets, including rollback and recovery. 

• Provide traceability and compliance evidence. Build automated checks and reports that link code changes to work items and funding sources across repositories, and support IP and compliance reviews with evidence generated from systems of record rather than assembled by hand. 

• Standardize observability. Develop a shared logging, telemetry, and health-check package that Integer repositories can adopt, with program-specific exporters for field and disconnected environments. 

• Measure and improve. Instrument delivery metrics (lead time, deployment success, change failure, time to recover) and use them to decide what to fix next. 

• Enable others. Write the standards, templates, and decision records that make the platform self-service. Mentor engineers on build, test, and security practice, and support programs as they adopt the common baseline. 

Required Qualifications

• Must be a U.S. Citizen with the ability to obtain and maintain a U.S. DoD Secret Clearance. 

• Bachelor’s degree in Computer Science, Software or Computer Engineering, Information Systems, or a related field, with 6+ years of hands-on DevOps, platform, build and release, or site reliability engineering experience; or Master’s degree with 4+ years. 

• Demonstrated experience designing and operating CI/CD pipelines, including authoring reusable templates and managing build agents or runners, on one or more platforms such as Azure DevOps, Atlassian (Bitbucket, Jira, Bamboo), AWS developer tools, GitHub Actions, GitLab CI, or Jenkins. Ability to move practices between platforms. 

• Experience running the infrastructure that delivers software to customers, and keeping it secure, available, and recoverable: patching, hardening, monitoring, backup, and incident response. 

• Strong working knowledge of containers: Docker image builds, multi-stage and multi-architecture builds, image registries, and Compose or similar orchestration. 

• Hands-on experience integrating security into delivery pipelines: vulnerability, secret, and dependency scanning (for example Trivy, Grype, or comparable tools), SBOM generation, and acting on findings. 

• Experience with artifact and package management (for example Nexus or Artifactory) and with Git branching, pull request policy, and code review workflows. 

• Proficiency in Linux administration and in scripting or programming for automation, such as Python and Bash; PowerShell is a plus. 

• Experience with infrastructure as code or configuration management, and with reproducible environments. 

• Strong written and oral communication skills; able to document decisions and explain trade-offs to both technical and non-technical audiences. 

• Ability to work independently on ambiguous problems, set priorities across several programs, and deliver working results. 

• Ability to travel occasionally (up to approximately 15% of the time) for program meetings, integration events, and field tests. 

Desired Qualifications

• Experience with robotics, embedded, or edge software, including ROS 2 and cross-compiling for ARM64. 

• Experience deploying to air-gapped, disconnected, or GovCloud environments. 

• Experience with Python packaging and environment management (conda, Poetry), and with governed or mirrored package repositories. 

• Experience with software supply-chain security practices such as artifact signing and provenance (for example Sigstore or SLSA). 

• Familiarity with NIST 800-53 and the Risk Management Framework, DISA STIGs, or CMMC. 

• Experience with observability tooling (for example Prometheus, Grafana, or OpenTelemetry). 

• Experience with static analysis and quality gates (for example SonarQube) and with test automation for simulation or hardware-in-the-loop systems. 

• Experience supporting Department of Defense or other U.S. Government research and development programs.