DevSecOps Engineer

Role overview

Sphinx Defense is hiring a DevSecOps Engineer to secure and scale the cloud-native infrastructure supporting its space- and national-security-focused software platforms. You’ll integrate security across the software development lifecycle, maintain critical security tooling, and work closely with engineering teams to ensure systems remain secure, compliant, and resilient.

Responsibilities

• Configure, deploy, and maintain security tools across AWS and cloud-native environments
• Integrate security tooling into existing software delivery and deployment workflows
• Partner with engineering teams to implement security best practices throughout the SDLC
• Manage and optimize security controls in AWS and Kubernetes clusters
• Maintain/improve application, infrastructure, and container security posture
• Implement automated security scanning, monitoring, alerting, and remediation
• Support compliance, vulnerability management, and incident response activities
• Continuously evaluate and adopt new security technologies and practices

Requirements

• 5+ years experience in DevSecOps, Cloud Security, SRE, DevOps, or related
• Hands-on experience operating and securing AWS environments
• Experience administering and securing Kubernetes clusters in production
• Experience integrating security tooling into CI/CD pipelines
• Ability to collaborate with software engineers to build security from design through deployment
• Experience with Infrastructure as Code (e.g., Terraform)

Nice-to-haves / Preferred qualifications

• Experience in DoD, national security, or regulated environments
• Container security, supply chain security, and vulnerability management program experience
• Experience implementing security policies as code
• Familiarity with zero-trust architecture principles

Additional signals from the posting (tools & domain)

• Identity & access management: Okta
• Container/Kubernetes security solutions: NeuVector, Kyverno
• WAF and cloud-native security controls
• CI/CD tooling: GitLab
• Monitoring/alerting/log aggregation: Sumo Logic
• Artifact/repository management: Nexus