Senior Forward Deployed DevSecOps Engineer

What you will do

• Deploy and operate Fulcrum in customer secure environments: stand up air-gapped installs and deploy to EKS/AKS via ArgoCD/Helm targeting IL2+ environments; integrate with customer identity, networks, and data systems, and keep them healthy (monitoring, logging, alerting).
• Contribute to the secure release pipeline (GitHub Actions, builds on hardened bases, signing, provenance, SBOMs, and release candidate gates feeding the weekly release train) and carry releases through its far end: ArgoCD/GitOps delivery.
• Rotate onto the development team shipping production Python (FastAPI services, CLIs) and hardening the platform itself: auth (OIDC/JWT), pod security, secrets handling.
• Turn scans, SBOMs, and provenance into accreditation and cATO evidence; execute the IL6 path (STIG hardening, GovCloud/DoD identity authorities).
• Represent engineering with the customer: run integrations, debug in place, and carry what you learn back into the product.

What we are looking for

• Active TS clearance required and in place at hire; U.S. citizenship required, with no clearance sponsorship available.
• 5+ years across DevSecOps, platform, or infrastructure engineering, proven in both halves of the job: writing production Python and deploying/operating systems in secure or air-gapped environments.
• Strong with containers and Kubernetes: image hardening, pod security, Helm/GitOps delivery, and infrastructure-as-code (Terraform or equivalent).
• Hands-on with CI/CD and software supply-chain security: GitHub Actions, image scanning, signing and provenance (cosign/Syft/Grype/Trivy or equivalents).
• Experience in DoD or IC environments: RMF/ATO, NIST 800-53, IL2+, STIG, working under accreditation constraints.
• Comfortable operating and integrating LLM/agent workloads: MCP, agent platforms, local model serving. This platform is one.
• Nice to have: UDS/Zarf/Iron Bank, AWS GovCloud, local LLM serving (Ollama/LMStudio), prior field or deployed engineering roles.

Fulcrum Defense is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.