Remote opportunity at
YurtsStaff DevSecOps Engineer
Legion is seeking a Staff DevSecOps Engineer to provide technical leadership across Platform DevOps and customer delivery. This role sits on the Mission Engineering team and…
Career Tools
About This Role
Legion is seeking a Staff DevSecOps Engineer to provide technical leadership across Platform DevOps and customer delivery. This role sits on the Mission Engineering team and involves managing internal build systems, platform operations, and customer deployments. Legion builds secure and reliable AI systems designed to operate within complex enterprise and government environments, including classified networks and disconnected locations. The person in this position will establish technical direction for internal CI/CD,…
Job Description
Legion is seeking a Staff DevSecOps Engineer to provide technical leadership across Platform DevOps and customer delivery. This role sits on the Mission Engineering team and involves managing internal build systems, platform operations, and customer deployments. Legion builds secure and reliable AI systems designed to operate within complex enterprise and government environments, including classified networks and disconnected locations.
The person in this position will establish technical direction for internal CI/CD, observability, deployment automation, vulnerability posture, and production reliability. Responsibilities include working directly with customer mission owners and IT security stakeholders, defining architecture and deployment standards using Kubernetes, Terraform, and Helm, and keeping a hands-on approach while guiding other engineers.
This position requires an active US Department of War or Intelligence TS/SCI clearance, eligibility to work in the United States without sponsorship, and a Bachelor of Science degree or higher in Computer Science, Engineering, or a related field. The salary range for this role is USD 182,750 to 215,000 per year.
Responsibilities
- Establish and execute the technical roadmap for Platform DevOps and customer deployment engineering.
- Engage with customer stakeholders, mission owners, and security teams to align on deployment approaches and acceptance criteria.
- Design architecture and standards for automated provisioning, configuration, upgrades, backups, and patching using tools like Kubernetes, Terraform, and Helm.
- Lead integrations with customer identity and access systems, resolving authentication and authorization needs.
- Manage the technical effectiveness of internal CI/CD, build reliability, artifact integrity, and release promotion.
- Direct the vulnerability posture strategy across infrastructure, artifacts, and third-party dependencies.
- Lead technical responses during complex investigations and incidents to drive lasting improvements.
- Translate Authorization to Operate, Certification to Field, and Risk Management Framework requirements into engineering tasks.
Requirements
- An active US Department of War or Intelligence TS/SCI clearance.
- At least 6 years of experience in DevOps, DevSecOps, or software engineering with technical leadership on complex initiatives.
- At least 4 years of experience managing or deploying software within US Government classified networks.
- Proficiency with cloud infrastructure, infrastructure as code like Terraform, and production-level Kubernetes, Linux, and Helm.
- Experience developing GitOps delivery mechanisms with tools such as FluxCD and Kustomize.
- Experience managing internal CI/CD infrastructure like GitLab pipelines and self-hosted runners.
- Experience creating secure, reproducible container builds using Docker, BuildKit, or Buildx.
- Strong understanding of secure service networking, ingress, DNS, and TLS utilizing Istio or Kubernetes Gateway API.
- Working knowledge of stateful services including PostgreSQL, Elasticsearch, Qdrant, and S3-compatible storage.
- Proficiency in building automation using Python or Bash along with Git, YAML, and JSON.
- Experience with monitoring and incident diagnosis tools like Grafana, Prometheus, and OpenTelemetry.
- Familiarity with identity federation and authentication protocols like Keycloak and OIDC or OAuth2.
- Eligibility to work in the United States without sponsorship.
Qualifications
- A Bachelor of Science degree or higher in Computer Science, Engineering, or related fields.
- CompTIA Security+ Certification.
- Experience packaging and delivering for restricted or disconnected environments using Defense Unicorns UDS Core or Zarf.
- Experience operating GPU workloads and model-serving infrastructure like NVIDIA GPU Operator or vLLM.
- Experience working in a startup environment.
Core Skills
Benefits
- Competitive compensation and benefits
- Support for professional growth and development
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary for the Staff DevSecOps Engineer position?
The salary range for this role is USD 182,750 to 215,000 per year.
What security clearance is required to apply?
Candidates must have an active US Department of War or Intelligence TS/SCI clearance.
What are the location and travel requirements for this job?
The posting lists the location as US remote with travel of up to 50%.
What certifications are required for this role?
Candidates must hold a CompTIA Security+ Certification.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.