DevSecOps Engineer Mid

Position Summary

MAG is dedicated to providing real-time situational awareness to help customers make the world safer. We believe our success is due to our exceptional employees. If you're interested in joining a team focused on serving customers with technical expertise, operational excellence, and flawless execution, apply today!

Position Overview

MAG Aerospace is seeking a skilled and detail-oriented Mid-Level DevSecOps Engineer to support the Wideband Control Integration Division at Tobyhanna Army Depot. The role involves supporting a CI/CD pipeline, implementing IaC principles, and ensuring comprehensive observability.

Essential Duties and Responsibilities

• Pipeline Management: Design, build, and maintain automated CI/CD pipelines for secure and efficient software delivery.
• Infrastructure as Code (IaC): Provision and configure infrastructure using declarative tools and configuration management.
• Kubernetes Administration: Deploy, maintain, and secure core platform services.
• Security Integration: Implement policy-as-code, manage secrets, and integrate security scanning tools into the developer workflow.
• Observability & Monitoring: Maintain monitoring, logging, and telemetry systems for platform health and rapid incident response.
• Support and Enhance Automation Testing: Automate testing for various satellite systems.

Requirements

• 3 or more years of experience in coding and software pipelines in a professional or academic environment.
• Strong analytical skills to debug issues across OS, container, and application layers.
• Must hold or be willing to obtain a Security+ (or equivalent) certification shortly after starting in the role.
• Must be able to work closely with software developers to troubleshoot deployment failures and optimize pipeline performance.
• Must be able to work within a small team and self-task.
• Must have the flexibility to work within a changing environment.

Education and Skills

• Degree in Computer Science or a related engineering field with 3+ years experience in a professional working environment as a DevSecOps engineer.
• Operating System & Core Infrastructure Experience: Administering Linux environments, specifically Rocky Linux (or similar RHEL-based distributions).
• Hands-on experience with deploying and managing RKE2 (Rancher Kubernetes Engine 2) clusters.
• Proficiency in writing and maintaining Ansible playbooks for configuration management.
• Experience using Terraform for infrastructure provisioning.
• Familiarity with container networking and security policies.
• Understanding of persistent storage in Kubernetes using Longhorn.
• Experience automating TLS certificate provisioning and lifecycle management via Cert-Manager.
• Ability to enforce Kubernetes native security and governance using Kyverno (Policy-as-Code).

Desired Requirements

• Experience with GitLab EE, including managing repositories, writing .gitlab-ci.yml pipelines, and maintaining GitLab Runners.
• Experience configuring and managing artifacts, dependencies, and container images using Sonatype Nexus Repository Manager.
• Experience managing secure access to credentials and tokens using OpenBao, integrated into Kubernetes via the External Secrets Operator.
• Experience configuring and maintaining the Kube-Prometheus-Stack.
• Familiarity with log aggregation and querying using Loki.
• Experience deploying and configuring Grafana Alloy for metric, log, and trace collection.

Qualifications

• Must be a U.S. Citizen.
• Must have an active DoD Secret Clearance or be able to obtain one.

Benefits and Compensation

The projected compensation range for this position is up to $120,000 (annualized USD). Benefits include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, and tuition assistance. For more information, visit the Resource page on our Careers site: https://www.magaero.com/benefits/.