Job description

Location: Columbia, MD Type: Hybrid Travel: 10% About Us: Sealing Technologies, a Parsons company, innovates and delivers high-performance deployable anywhere technologies that push what's possible at the edge, enabling organizations across the globe to solve complex challenges with speed and confidence. We design, engineer, and deliver products and deployable technologies built for environments where traditional infrastructure falls short. Position Overview: SealingTech is looking for a DevSecOps Lead to improve our software delivery function from the ground up. This is a builder's role for someone who thrives with a phased approach on working with existing tech and introducing new technologies. You will refine the CI/CD pipeline and security gates, establish the release process, and create the operational discipline that turns a fast-moving engineering team into a reliable delivery organization. We're looking for someone to own the process, treating every stage of the pipeline as a place where risk must be identified, contained, and engineered out. You will architect delivery so that what leaves our pipeline is secure, reproducible, and trustworthy. The right person is an independently motivated self-starter who owns ambiguity, sets their own priorities, and moves fast without waiting for a playbook. Duties and Responsibilities: • Design and own the end-to-end CI/CD pipeline as the core delivery-risk control surface, embedding SAST/DAST/SCA/SBOM gates and enforcing release policy. • Manage Nexus artifact repositories as the trusted source of truth; scrutinize every stage for compromise or failure points. • Own packaging, signing, and validation for deployment into a customer’s offline/air-gapped network, including distribution integrity and system integration and certification. • Build and operate GPU/hardware lab infrastructure for AI/ML testing, provisioning, workload optimization, and capacity planning. • Drive the move to infrastructure-as-code, reproducible builds, and operational maturity, partnering with engineering on the infra roadmap and setting reliability/security/compliance standards. Minimum Qualifications: • U.S. Citizenship • 8+ years of DevOps, SRE, or infrastructure engineering, including ownership of a CI/CD pipeline as a delivery-risk control surface • A track record of building something from little or nothing (a pipeline, platform, practice, or program), ideally in a startup or similarly fast-moving, low-structure environment • Expert-level GitHub Actions, GitLab pipelines and CI/CD architecture, with hands-on security scanning integration (SAST/DAST/SCA) • Deep proficiency with containers (Docker/Podman), artifact management (Nexus or equivalent), and RPM packaging for Linux distributions • Strong VMware/ESXi administration including GPU resource management and configuration • Advanced Linux system administration (RHEL/Rocky), networking, firewall management, and out-of-band systems (IPMI/iDRAC) • Hands-on experience with GPU infrastructure and AI/ML inference workload management • Experience designing software delivery for offline, disconnected, or restricted-network deployment scenarios • Self-directed and comfortable with ambiguity, able to set priorities, decide, and move quickly without a predefined playbook • Bachelor's degree in Engineering, Computer Science, Information Technology, or related field; equivalent experience will be considered. Preferred Qualifications: • Delivery or SRE experience at a SaaS or product software company, with a strong point of view on pipeline risk mitigation • Experience applying DISA STIG/NIST compliance frameworks • Understanding of SBOM and supply-chain security practices (Trivy, etc) • Invicti or similar DAST platform integration and policy management • Image assembly and OS build tools (osbuild, osbuild-composer, lorax) • Infrastructure-as-code platforms (Ansible, Terraform) • Multi-GPU systems, GPU clustering, or large-scale inference optimization • Government contracting or defense sector experience Sealing Technologies is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status. Working is no longer solely about the job. Here at Sealing Tech, we understand your happiness and health is vital to our success. We are innovative in our approach to cultivating balanced work environments and offer a plethora of added perks. Sealing Tech offers competitive compensation packages, health, dental, and vision insurance, retirement contributions, continuing education budgets, tuition reimbursement, flexible schedules, and generous vacation policies. Other perks include complimentary snacks, drinks & monthly catered lunches, and company retreats and gatherings. Plus, flexible work arrangements, pet friendly offices and quarterly merit bonuses for qualified employees. We are looking for a new member to join our team, take on challenges, be innovative and willing to grow with us. BUILD, SECURE, SOLVE.

Requirements

Must-haves

Location: Columbia, MD
Type: Hybrid
Design and own the end-to-end CI/CD pipeline as the core delivery-risk control surface, embedding SAST/DAST/SCA/SBOM gates and enforcing release policy.
Manage Nexus artifact repositories as the trusted source of truth; scrutinize every stage for compromise or failure points.
Own packaging, signing, and validation for deployment into a customer’s offline/air-gapped network, including distribution integrity and system integration and certification.
Build and operate GPU/hardware lab infrastructure for AI/ML testing, provisioning, workload optimization, and capacity planning.
Drive the move to infrastructure-as-code, reproducible builds, and operational maturity, partnering with engineering on the infra roadmap and setting reliability/security/compliance standards.
U.S. Citizenship
8+ years of DevOps, SRE, or infrastructure engineering, including ownership of a CI/CD pipeline as a delivery-risk control surface
A track record of building something from little or nothing (a pipeline, platform, practice, or program), ideally in a startup or similarly fast-moving, low-structure environment
Expert-level GitHub Actions, GitLab pipelines and CI/CD architecture, with hands-on security scanning integration (SAST/DAST/SCA)
Deep proficiency with containers (Docker/Podman), artifact management (Nexus or equivalent), and RPM packaging for Linux distributions
Strong VMware/ESXi administration including GPU resource management and configuration
Advanced Linux system administration (RHEL/Rocky), networking, firewall management, and out-of-band systems (IPMI/iDRAC)
Hands-on experience with GPU infrastructure and AI/ML inference workload management
Experience designing software delivery for offline, disconnected, or restricted-network deployment scenarios

Nice-to-haves

Delivery or SRE experience at a SaaS or product software company, with a strong point of view on pipeline risk mitigation
Experience applying DISA STIG/NIST compliance frameworks
Understanding of SBOM and supply-chain security practices (Trivy, etc)
Invicti or similar DAST platform integration and policy management
Image assembly and OS build tools (osbuild, osbuild-composer, lorax)
Infrastructure-as-code platforms (Ansible, Terraform)
Multi-GPU systems, GPU clustering, or large-scale inference optimization
Government contracting or defense sector experience

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

ci/cdaimldocker

Platform: breezy
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision