Lead DevSecOps Engineer

• →Design and own the end-to-end CI/CD pipeline as the core delivery-risk control surface, embedding SAST/DAST/SCA/SBOM gates and enforcing release policy.
• →Manage Nexus artifact repositories as the trusted source of truth; scrutinize every stage for compromise or failure points.
• →Own packaging, signing, and validation for deployment into a customer’s offline/air-gapped network, including distribution integrity and system integration and certification.
• →Build and operate GPU/hardware lab infrastructure for AI/ML testing, provisioning, workload optimization, and capacity planning.
• →Drive the move to infrastructure-as-code, reproducible builds, and operational maturity, partnering with engineering on the infra roadmap and setting reliability/security/compliance standards.

• U.S. Citizenship
  
• 8+ years of DevOps, SRE, or infrastructure engineering, including ownership of a CI/CD pipeline as a delivery-risk control surface
• A track record of building something from little or nothing (a pipeline, platform, practice, or program), ideally in a startup or similarly fast-moving, low-structure environment
• Expert-level GitHub Actions, GitLab pipelines and CI/CD architecture, with hands-on security scanning integration (SAST/DAST/SCA)
• Deep proficiency with containers (Docker/Podman), artifact management (Nexus or equivalent), and RPM packaging for Linux distributions
• Strong VMware/ESXi administration including GPU resource management and configuration
• Advanced Linux system administration (RHEL/Rocky), networking, firewall management, and out-of-band systems (IPMI/iDRAC)
• Hands-on experience with GPU infrastructure and AI/ML inference workload management
• Experience designing software delivery for offline, disconnected, or restricted-network deployment scenarios
• Self-directed and comfortable with ambiguity, able to set priorities, decide, and move quickly without a predefined playbook
• Bachelor's degree in Engineering, Computer Science, Information Technology, or related field; equivalent experience will be considered.

• Delivery or SRE experience at a SaaS or product software company, with a strong point of view on pipeline risk mitigation
• Experience applying DISA STIG/NIST compliance frameworks
• Understanding of SBOM and supply-chain security practices (Trivy, etc)
• Invicti or similar DAST platform integration and policy management
• Image assembly and OS build tools (osbuild, osbuild-composer, lorax)
• Infrastructure-as-code platforms (Ansible, Terraform)
• Multi-GPU systems, GPU clustering, or large-scale inference optimization
• Government contracting or defense sector experience

Sealing Technologies is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status. Working is no longer solely about the job. Here at Sealing Tech, we understand your happiness and health is vital to our success. We are innovative in our approach to cultivating balanced work environments and offer a plethora of added perks. Sealing Tech offers competitive compensation packages, health, dental, and vision insurance, retirement contributions, continuing education budgets, tuition reimbursement, flexible schedules, and generous vacation policies. Other perks include complimentary snacks, drinks & monthly catered lunches, and company retreats and gatherings. Plus, flexible work arrangements, pet friendly offices and quarterly merit bonuses for qualified employees. We are looking for a new member to join our team, take on challenges, be innovative and willing to grow with us. BUILD, SECURE, SOLVE.