DevSecOps Engineer - Physical AI

The role

The DevSecOps Engineer will own secure code integration across the software delivery lifecycle. This person will work with developers to ensure software is securely built, tested, packaged, and deployed into Government and customer environments.

What you will do

• Own secure code integration from source through build, test, release, and deployment
• Support developers integrating and deploying software onto Government and customer systems
• Build and maintain secure CI/CD pipelines, reusable pipeline templates, and hardened build environments
• Integrate and tune SAST, DAST, SCA, secrets scanning, container scanning, and infrastructure-as-code scanning
• Define and enforce promotion gates
• Serve as the primary technical resource for developers by troubleshooting findings and pairing on remediation
• Automate system hardening, security validation, and compliance evidence collection
• Build preventive and detective controls in AWS GovCloud
• Implement software supply chain protections including SBOM generation and artifact signing
• Support software promotion into classified and air-gapped environments

Required qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or a related field, or equivalent hands-on experience
• Minimum of 5 years of experience across software engineering, DevOps, platform engineering, or security engineering
• DoD 8140/8570 IAT level II (Security+ Certification, condition of employment)
• Hands-on scripting or software development experience using Python, Bash, Go, or similar languages
• Experience with CI/CD platforms such as GitLab CI, GitHub Actions, Jenkins, or equivalent tooling
• Production experience with containers and orchestration technologies such as Docker and Kubernetes
• Experience with infrastructure-as-code or configuration management technologies such as Terraform or Ansible, AWS CDK, or CloudFormation
• Hands-on AWS experience, including working knowledge of Config, Security Hub, IAM, KMS, CloudTrail, and CloudWatch/EventBridge
• Experience writing and deploying policy-as-code (OPA Rego, cfn-guard, Cedar, or equivalent)
• Working knowledge of NIST 800-53, NIST 800-171, DISA STIGs, and RMF, and of DFARS 252.204-7012 and CMMC Level 2 obligations
• Experience producing audit-ready evidence and working directly with third-party assessors
• Experience introducing blocking security gates into a delivery pipeline

Nice to have

• CISSP, CSSLP, or CKS certification, or AWS Security Specialty
• Experience with DoD software factories such as Platform One, Iron Bank, or Big Bang
• Experience with hardware-isolated container runtimes such as Kata Containers or gVisor
• Experience delivering software into classified or air-gapped environments
• Familiarity with software supply chain frameworks such as SLSA, SSDF, CycloneDX, or SPDX
• Experience supporting a FedRAMP or DoD Impact Level 4/5 authorization
• Experience securing AI/ML workloads or machine-generated code and container artifacts
• Prior software development experience on a product engineering team

Benefits

• Base salary
• Equity
• Comprehensive health, dental, vision and life and disability insurance coverage
• 401k retirement benefits with employer match
• Learning and wellness stipends
• Paid time off

Before you apply

• Must be a U.S. Citizen
• Must have or be able to obtain an active DoD security clearance (minimum Secret, prefer Top Secret)

About the company

Applied Intuition, Inc. is a Silicon Valley company creating digital infrastructure for physical AI. It services the automotive, defense, trucking, construction, mining and agriculture industries.