[Hiring] Staff DevSecOps Engineer @Legion Intelligence

Role Description

We’re looking for a Staff DevSecOps Engineer who will set technical direction across Platform DevOps and customer delivery. You will shape the engineering systems and practices that take Legion from development to dependable operation, enabling teams to deliver improvements faster and customers to realize mission value sooner.

This position requires a US DoW or Intelligence TS/SCI clearance.

As a Staff DevSecOps Engineer on the Mission Engineering team, which also owns Platform DevOps, you will provide technical leadership across internal build and release systems, platform operations, and customer deployments. You will work directly with customer mission owners, IT teams, and security stakeholders to understand their needs, achieve technical alignment, and deliver Legion into their operating environments. You will define the architecture and improvement roadmap for this domain and lead complex initiatives from problem definition through deployment, adoption, and measured results. Your scope includes internal CI/CD, observability and alerting, vulnerability posture, deployment automation, and production reliability. You will translate mission needs and operating constraints into technical decisions, resolve tradeoffs across teams, and turn recurring delivery barriers into durable improvements to Legion. You will remain hands-on in delivering the platform to customers while guiding engineers and establishing practices that make the whole team more effective.

Responsibilities

• Set and drive the technical roadmap for Platform DevOps and customer deployment engineering.
• Identify the constraints that most limit delivery of mission value, build the case for investment, and lead improvements with clear outcomes for delivery speed, reliability, and security.
• Own technical alignment with customer stakeholders throughout delivery.
• Lead architecture and readiness discussions with mission owners, IT teams, and security reviewers.
• Agree on deployment approach, integration requirements, responsibilities, and acceptance criteria.
• Resolve technical disagreements and dependencies with clear decisions and follow-through.
• Define the architecture and standards for repeatable deployment and lifecycle automation across internal and customer environments.
• Lead adoption of reusable approaches for provisioning, configuration, upgrades, backups, and patching using Kubernetes, Flux, Terraform, Helm, Docker, and related technologies.
• Lead the architecture for integration with customer identity and access systems.
• Resolve complex authentication and authorization requirements with customer and product engineering stakeholders.
• Establish patterns that future deployments can reuse.
• Own the technical direction and effectiveness of internal CI/CD and release infrastructure.
• Lead improvements to build reliability, automated validation, artifact integrity, and release promotion.
• Own the technical strategy for vulnerability posture across platform infrastructure, deployment artifacts, and third-party containers and dependencies.
• Establish risk-based prioritization, remediation expectations, and visibility into outstanding exposure.
• Drive fixes with engineering and security owners and verify their closure.
• Provide technical leadership during complex incidents and investigations.
• Guide diagnosis across system boundaries, coordinate customer and engineering stakeholders.
• Ensure root-cause findings lead to lasting architectural and operational improvements.
• Lead the technical approach to deployment authorization and security evidence.
• Translate Authorization to Operate (ATO), Certification to Field (CTF), and Risk Management Framework (RMF) requirements into engineering work.
• Establish repeatable ways to produce and maintain the required evidence.

Qualifications

• An active US DoW or Intelligence TS/SCI clearance.
• A BS degree or higher in Computer Science, Engineering, or related fields.
• CompTIA Security+ Certification.
• 6+ years of experience in DevOps, DevSecOps, or software engineering, with demonstrated technical leadership of complex initiatives.
• Ability to set architectural direction, guide engineers across teams, and translate customer and engineering needs into delivery priorities and measurable outcomes.
• Proven experience engaging directly with customer technical and mission stakeholders.
• 4+ years of experience deploying software and/or managing software deployments in US Government classified networks.
• Strong working knowledge of cloud infrastructure and infrastructure as code (e.g., Terraform).
• Deep production experience with Kubernetes, Linux, and Helm.
• Experience designing and evolving GitOps delivery systems using tools such as FluxCD and Kustomize.
• Experience owning internal CI/CD infrastructure, such as GitLab pipelines.
• Experience designing secure, reproducible container builds using Docker.
• Experience defining and improving software supply-chain security and vulnerability posture.
• Strong understanding of secure service networking and access controls.
• Strong working knowledge of operating stateful services such as PostgreSQL, Elasticsearch, Qdrant, and S3-compatible storage.
• Proficiency building maintainable automation in Python or Bash.
• Strong working knowledge of metrics, logs, traces, and incident diagnosis using tools such as Grafana, Prometheus, and OpenTelemetry.
• Strong working knowledge of authentication and identity federation using technologies such as Keycloak and OIDC/OAuth2.
• Must be eligible to work in the US without sponsorship.

Preferred Qualifications

• Experience designing packaging and delivery for restricted or disconnected environments using tools such as Defense Unicorns UDS Core or Zarf.
• Experience operating GPU workloads and model-serving infrastructure using technologies such as NVIDIA GPU Operator or vLLM.
• Experience applying these skills in a startup environment is also valuable.

Benefits

• Competitive compensation and benefits.
• Support for professional growth and development.

Compensation Information

$182,750 — $215,000 USD

Equal Opportunity Statement

Legion provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.