18 days ago
Lexington, MA, USASenior / Staff+
Base Salary
$127k - $190k/yr
Responsibilities
- Serve as the DevSecOps subject-matter expert and architectural authority.
- Define standards, reference architectures, and best practices across teams.
- Design and implement secure, scalable, and highly available cloud and hybrid platforms.
- Embed security controls into CI/CD pipelines, infrastructure-as-code, container platforms, and deployment workflows.
- Evaluate and integrate DevSecOps tooling for SAST, DAST, SCA, secrets management, encryption, identity, and container security.
- Lead implementation of containerized platforms using tools such as Docker, Kubernetes, and OpenShift.
- Integrate identity access management, secrets management, and encryption into platforms and pipelines.
- Troubleshoot complex system, pipeline, and security issues across environments.
- Advise engineering, security, and platform teams and mentor engineers.
- Lead technical reviews, architecture discussions, and root cause analyses.
- Maintain vulnerability assessment databases and monitor GitLab Security Dashboards for vulnerabilities.
- Work with developers to remediate vulnerabilities and enforce compliance frameworks.
- Maintain software release pipelines and update base container images with current security patches.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related field.
- Secret security clearance.
- 5–10 years of experience in software development, systems engineering, platform engineering, or DevOps roles.
- Expert experience building container images with Podman, Docker, Kaniko, and Skopeo.
- Familiarity with Universal Base Images, k3s, and k8s; familiarity with k3s and k8s is desired.
- Expert-level experience building and optimizing GitLab CI/CD pipelines, including CI templates or CI components.
- Proficiency implementing security scan execution policies and pipeline security scans.
- Familiarity with Trivy, Semgrep, Gemnasium, or other SBOM-based dependency scanning tools.
- Expert-level experience with package managers for Java, Python, and Node.
- Proficiency with Red Hat Enterprise Linux 8.10 or higher.
- Willingness and ability to travel up to 10%, typically within the continental United States.
Benefits
- Hybrid work is possible, with the position primarily on-site at MIT Lincoln Laboratory in Lexington, Massachusetts.
- Standard working hours.
- Work supports innovative national security, communications, laser communication, space defense, and defense systems projects.
About KBR, Inc.
KBR, Inc. delivers engineering, technology, and professional services to government and industrial customers, spanning defense, space, sustainability, and energy. Its businesses include long-term government mission support and program management, and Sustainable Technology Solutions that license process technologies and provide consulting and operations support across asset lifecycles. Headquartered in Houston and listed on the NYSE, KBR became an independent public company in 2006 after its separation from Halliburton.