Kbr, Inc.
Provides engineering, procurement, construction and technology solutions to government and industry worldwide.
CI/CD & Release Engineering SME
Senior DevSecOps engineer overseeing secure CI/CD pipelines for defense platforms.
Job Highlights
About the Role
• Own delivery pipeline for platform and simulation applications across connected and air‑gapped environments. • Implement repeatable, compliant CI/CD, artifact management, and promotion pipelines supporting canary/blue‑green rollouts and secure supply‑chain practices. • Design GitOps workflows (Argo CD/Flux) and CI pipelines (GitHub Actions, Tekton, Argo Workflows) for containers using Helm/Kustomize. • Build promotion pipelines with environment gates, automated tests, policy checks, and Istio traffic shifting. • Manage artifact registries, image relocation, and generate SBOMs (CycloneDX/SPDX) aligned with SLSA provenance. • Enable air‑gap packaging and automated offline install/update verification. • Establish compliance automation including supply‑chain scanning, container signing with cosign, CVE triage, and audit trails.
Key Responsibilities
- ▸ci/cd
- ▸gitops
- ▸artifact management
- ▸sbom generation
- ▸air‑gap packaging
- ▸compliance automation
What You Bring
We are seeking a Senior Software Engineer in Beavercreek, OH, to serve as a CI/CD and Release Engineering subject‑matter expert. The position requires an active Department of Defense Top Secret clearance with SCI eligibility. The incumbent will own the delivery pipeline for platform and simulation applications, both connected and air‑gapped. Success in this role will drive reliable, secure software delivery for defense systems. Required qualifications include 12+ years of software engineering experience and 5–7 years in DevSecOps or Release Engineering, with deep expertise in Kubernetes CI/CD, GitOps, and Helm/Kustomize. Experience with policy‑as‑code tools such as OPA, Gatekeeper, or Kyverno, as well as SBOM generation, container signing, and image mirroring, is essential. An active DoD Top Secret clearance with SCI eligibility is mandatory. Desired experience covers operating CI/CD in disconnected networks, automated air‑gap workflows, performance‑aware rollouts, and proven ability to meet DoD compliance controls. • Required: 12+ years software engineering, 5‑7+ years DevSecOps/Release Engineering, strong Kubernetes CI/CD, GitOps, Helm/Kustomize, policy‑as‑code (OPA/Gatekeeper/Kyverno), SBOM, container signing, image mirroring, active DoD Top Secret clearance with SCI. • Desired: experience with CI/CD in disconnected/secure networks, automated air‑gap workflows, performance‑aware rollouts, canary analysis, automated rollback, and demonstrated ability to meet DoD compliance controls.
Requirements
- ▸kubernetes
- ▸gitops
- ▸helm
- ▸opa
- ▸top secret
- ▸devsecops
Benefits
The role is primarily on‑site with hybrid flexibility and may involve up to 15 % travel. Standard working hours apply, with a typical full‑time schedule. Candidates must be prepared to work in a collaborative, high‑performing environment. KBR provides a competitive benefits package that may include 401(k) matching, medical, dental and vision coverage, life and disability insurance, flexible spending accounts, paid time off and flexible work schedules. The company supports career growth through professional training and development. KBR values a diverse, inclusive, zero‑harm culture and is committed to environmental, social, and governance principles. KBR is an equal‑opportunity employer. • Competitive benefits may include 401(k) match, medical/dental/vision coverage, life and disability insurance, flexible spending accounts, paid time off, flexible schedules, and professional development opportunities.
Work Environment
Onsite