Senior DevSecOps Engineer

About the Role

Bluestaq is seeking a Senior DevSecOps Engineer to build, secure, and operate the delivery pipelines and infrastructure that move software from development to production in mission-critical environments. In this hands-on individual contributor role, you will support multiple services and environments within a program or major product area, acting as a go-to resource for pipeline and deployment questions for your teams. 

You will own medium-sized initiatives end to end, such as containerizing an application, adding security scanning to a pipeline, or migrating a service to GitOps, and will proactively harden the systems in your area. You will design and maintain moderately complex pipelines, manage Kubernetes-based infrastructure, and participate in incident response and root-cause analysis when pipelines, deployments, or clusters break. 

Responsibilities  

Pipelines & Automation  

• Design and maintain moderately complex CI/CD pipelines with multi-stage builds, approvals, automated tests, and security scans. 
• Own medium-sized initiatives end to end, such as containerizing an application, adding security scanning, or migrating a service to GitOps. 
• Integrate CI/CD, security scanners, logging, metrics, GitOps, and artifact management tooling; automate away manual deployment steps. 

Kubernetes & Infrastructure  

• Manage Kubernetes clusters, including resource requests and limits, ingress, secrets, certificates, and networking. 
• Define infrastructure with Terraform (or similar IaC) and Ansible across multiple services and environments (e.g., dev/test/prod). 

Required Qualifications  

• Experience designing and maintaining CI/CD pipelines with multi-stage builds, approvals, automated testing, and security scanning. 
• Hands-on experience managing Kubernetes clusters, including resource management, ingress, secrets, certificates, and networking. 
• Experience with Terraform (or similar IaC), including state management, drift, and modularization. 
• Experience with configuration-as-code using Ansible. 
• Experience integrating tooling across the delivery workflow: security scanners, logging, metrics, GitOps, and artifact management. 
• Experience supporting multiple services and environments (e.g., dev/test/prod). 
• Experience participating in incident response and root-cause analysis for pipeline, deployment, or infrastructure issues. 
• Strong collaboration and communication skills; able to support developers and act as a resource for delivery questions. 

Preferred Qualifications  

• Experience operating in regulated, mission-critical, or high-security environments. 
• Experience with GitOps workflows and tooling. 
• Familiarity with container security practices such as image scanning, SBOMs, and policy engines. 
• Experience improving monitoring, alerting, and observability for services or platforms. 
• Experience hardening infrastructure, including IAM, secrets management, and secure baselines. 
• Experience containerizing applications and modernizing delivery workflows. 

Required Education & Experience  

• High School Diploma/GED and 6+ years of relevant experience, OR  
• Associate degree in a related field and 4+ years of relevant experience, OR  
• Bachelor's degree in Computer Science, Engineering, or related field and 2+ years of relevant experience, OR  
• Master's degree in a related field and 0+ years of relevant experience 

Salary Range (CO)

$115,000—$150,000 USD

Clearance Requirement: This position may require an active TS/SCI Clearance. Current clearance holders are strongly encouraged to apply. If you don't currently hold one, Bluestaq will sponsor eligible candidates through the clearance process based on program needs.

Relocation: Relocation assistance is available for full-time positions.

About Bluestaq

At Bluestaq, we build secure data platforms that matter for space missions, national defense, healthcare systems, and commercial innovation. Founded in 2018, we've become a leader in enterprise software and secure data management by staying focused on what counts: modern architecture, operational excellence, and mission impact.

We're engineers, problem-solvers, and builders who take the mission seriously, but not ourselves. We automate the repeatable, question the status quo, and design systems that are as reliable as they are scalable. Whether we're supporting space, defense systems, or healthcare advancements, we build with the same principles: cloud-native solutions, security by design, and relentless simplicity.

What We Offer:

For full-time positions

• 100% employer-paid health, dental, and vision for you and your dependents
• 10% total 401(k) contribution from day one, no vesting period - Bluestaq contributes 4% automatically and matches 100% of the next 6%
• Every role is eligible for an annual performance bonus
• $200,000 employer-paid life insurance, plus short- and long-term disability coverage
• $5,000 annual professional development budget per employee
• 20 days PTO, plus 8 paid holidays
• Pet insurance, onsite gym, and flexible schedule

Bluestaq is an Equal Opportunity Employer. We prohibit unlawful discrimination against applicants or employees on the basis age 40 and over, color, disability, gender identity, genetic information, military or veteran status, national origin, race, religion, sex, sexual orientation, or any other status protected by state or local law.

Bluestaq will make reasonable accommodations for qualified individuals with known disabilities and employees whose work requirements interfere with a religious belief unless doing so would result in an undue hardship to Bluestaq or a direct threat. Employees needing such accommodation are instructed to contact Human Resources immediately at [email protected].

Applications will be accepted for 60 days beyond the posting date, or until the position is filled, whichever comes first.