{"id":2143452,"url":"https://alion.io/job/divergent-technologies-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":58529,"name":"Divergent Technologies","domain":"divergent3d.com","url":"https://alion.io/company/divergent-technologies","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":84,"open_postings":24,"ghost_share":0,"stale_share":0.625,"repost_share":0,"time_to_fill_p50_days":54,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Torrance, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":115843,"max":156729,"currency":"USD","period":"year","gross":null,"usd_annual":156729},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Docker","optional":false},{"name":"Git","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Pulumi","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Checkov","optional":true},{"name":"Cilium Tetragon","optional":true},{"name":"Cosign","optional":true},{"name":"Datadog","optional":true},{"name":"Falco","optional":true},{"name":"Grafana","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"Kyverno","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"Open Policy Agent","optional":true},{"name":"OpenTelemetry","optional":true},{"name":"OWASP Dependency-Track","optional":true},{"name":"Prometheus","optional":true},{"name":"SBOM","optional":true},{"name":"Service Mesh","optional":true},{"name":"SIEM","optional":true},{"name":"Sigstore","optional":true},{"name":"SLSA","optional":true},{"name":"Snyk","optional":true},{"name":"Splunk","optional":true},{"name":"Syft","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Vault","optional":true}],"status":"live","first_seen_at":"2026-09-30T22:25:06Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-16T14:30:11Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Divergent is building the new industrial age. Every day, our teams design, manufacture, and assemble advanced systems for some of the world’s most demanding industries. Our integrated engineering and manufacturing platform transforms complex designs into production-ready solutions, helping customers move faster, build smarter, and deliver critical systems when they matter most. Divergent is a qualified Tier 1 supplier to global automotive OEMs and supports leading U.S. aerospace and defense companies. \nJoin us and help push the boundaries of what can be built.\nPurpose\nWe are seeking a DevSecOpsEngineer to embed security into every stage of the software delivery lifecycle, from the first commit through production operation. Divergent Technologies Inc. builds and operatesa digital manufacturing platform in which software, hardware, and physical production are tightly coupled, which means the pipelines that ship our code warrantthe same protection as the code itself. In this role you will own the automation that makes secure delivery the default rather than the exception: hardened CI/CD pipelines, policy-as-code guardrails, reproducibly provisioned cloud infrastructure, and vulnerability findings that reach the responsible engineer with enough context to act on. You will partner with software, platform, and IT teams to reduce risk without slowing delivery, treating security controls as engineering problems to be solved with tooling rather than checklists to be enforced after the fact. \nThe Role\nDesign, build, and maintain CI/CD pipelines with automated security gates - static analysis, software composition analysis, secrets detection, container image scanning, and infrastructure-as-code policy checks - that fail fast and produce actionable findings. \nProvision and manage cloud infrastructure as code across Azure and AWS environments and enforce configuration standards through policy-as-code rather than manual review. \nHarden container and Kubernetes workloads, including base image lifecycle, admission control, runtime policy, network segmentation, and least-privilege workload identity. \nOwn secrets management and pipeline authentication - vaulted credentials, short-lived tokens, and federated identity - and drive the elimination of long-lived static keys. \nTriage and prioritize vulnerability findings across source code, third-party dependencies, container images, and cloud posture; partner with engineering owners to drive remediation to closure against defined service levels. \nBuild and maintain software supply chain controls, including dependency and lockfile hygiene, artifact signing and provenance, and software bill of materials generation and distribution. \nInstrument delivery and runtime environments for security observability by defining detections, dashboards, and alerting, and participate in response for pipeline and infrastructure incidents. \nAutomate cloud security posture assessment and remediation across accounts and subscriptions, covering identity, network, logging, and encryption baselines. \nSupport control mapping and audit evidence collection for applicable frameworks, favoring automated evidence generation over manual attestation. \nRaise the security baseline of other engineers through reusable pipeline templates, documented golden paths, code review, and hands-on mentoring. \nBasic Qualifications\nMust be a U.S. Person as defined by the International Traffic in Arms Regulations (22 CFR §120.62) - a U.S. citizen, lawful permanent resident, or other protected individual. \n5-10 years of professional experience in DevOps, platform, site reliability, security, or software engineering, including at least 3 years with direct responsibility for securing CI/CD pipelines or cloud infrastructure. \nBachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field, or equivalent demonstrated experience. \nProduction experience with at least one major cloud provider (Azure or AWS), including its identity and access management, networking, and logging services. \nHands-on experience building and maintaining pipelines in a modern CI/CD system such as GitHub Actions, GitLab CI, Azure Pipelines, or Jenkins. \nProficiency with infrastructure as code (Terraform, Bicep, CloudFormation, or Pulumi), with changes managed through version control and peer review. \nWorking knowledge of containers and orchestration (Docker and Kubernetes), including image hardening and cluster access control. \nAutomation and scripting ability in Python, Go, Bash, or PowerShell sufficient to build internal tooling and integrate vendor APIs, not solely to configure existing tools. \nPractical experience integrating and operating application security tooling (Blackduck or Rapid7) - SAST, software composition analysis, secrets scanning, and image scanning - and triaging its output. \nSolid grasp of core security concepts, including least privilege, network segmentation, key management, authentication and authorization protocols (OAuth 2.0, OIDC, SAML), and common vulnerability classes such as the OWASP Top 10. \nExperience with Git-based team workflows, code review, and branch protection. \nClear written and verbal communication, with the ability to explain security risk and engineering tradeoffs to both technical and non-technical audiences. \nPreferred Qualifications\nExperience in an export-controlled or otherwise regulated environment (ITAR/EAR, CMMC, NIST SP 800-171), or in aerospace, automotive, or advanced manufacturing. \nExposure to manufacturing or operational technology systems, including securing build, test, or production-floor systems that cannot tolerate unplanned downtime. \nSoftware supply chain security experience with SBOM tooling (Syft, CycloneDX, SPDX), artifact signing (Sigstore/cosign), SLSA provenance, or platforms such as Black Duck, Snyk, or Dependency-Track. \nPolicy-as-code experience with Open Policy Agent/Rego, Kyverno, Conftest, Checkov, or cloud-native policy engines. \nKubernetes security depth, including admission controllers, service mesh mTLS, and runtime detection tooling such as Falco or Tetragon. \nSecrets platform experience with HashiCorp Vault, Azure Key Vault, or AWS Secrets Manager, including dynamically issued credentials. \nDetection engineering or SIEM experience (Microsoft Sentinel, Splunk, or Elastic), including log pipeline design and tuning. \nThreat modeling experience and familiarity with the MITRE ATT&CK framework. \nObservability tooling experience with Prometheus, Grafana, OpenTelemetry, or Datadog. \nRelevant certifications such as CISSP, CCSP, CKS, GIAC (GCSA, GCLD, GWAPT), or a cloud provider security specialty. \nContributions to internal developer platforms, golden-path templates, or open-source security tooling. \nWork Environment\nThis is a hybrid on-site role located at our Torrance, CA headquarters. \nStandard schedule is Monday through Friday during core business hours, with flexibility required for occasional after-hours deployment windows, maintenance, and security incident response. \nParticipation in a shared on-call rotation for pipeline and infrastructure incidents. \nWork is performed primarily in office and laboratory settings, with periodic time on the manufacturing floor where personal protective equipment is required. \nProlonged periods of sitting and working at a computer. \nOccasional lifting and moving of equipment weighing up to 25 pounds. \nThe role requires access to export-controlled technical data; continued access is contingent on maintaining U.S. Person status. \nteams to reduce risk without slowing delivery, treating security controls as engineering problems to be solved with tooling rather than checklists to be enforced after the fact. \nThe Role\nDesign, build, and maintain CI/CD pipelines with automated security gates - static analysis, software composition analysis, secrets detection, container image scanning, and infrastructure-as-code policy checks - that fail fast and produce actionable findings. \nProvision and manage cloud infrastructure as code across Azure and AWS environments and enforce configuration standards through policy-as-code rather than manual review. \nHarden container and Kubernetes workloads, including base image lifecycle, admission control, runtime policy, network segmentation, and least-privilege workload identity. \nOwn secrets management and pipeline authentication - vaulted credentials, short-lived tokens, and federated identity - and drive the elimination of long-lived static keys. \nTriage and prioritize vulnerability findings across source code, third-party dependencies, container images, and cloud posture; partner with engineering owners to drive remediation to closure against defined service levels. \nBuild and maintain software supply chain controls, including dependency and lockfile hygiene, artifact signing and provenance, and software bill of materials generation and distribution. \nInstrument delivery and runtime environments for security observability by defining detections, dashboards, and alerting, and participate in response for pipeline and infrastructure incidents. \nAutomate cloud security posture assessment and remediation across accounts and subscriptions, covering identity, network, logging, and encryption baselines. \nSupport control mapping and audit evidence collection for applicable frameworks, favoring automated evidence generation over manual attestation. \nRaise the security baseline of other engineers through reusable pipeline templates, documented golden paths, code review, and hands-on mentoring. \nBasic Qualifications\nMust be a U.S. Person as defined by the International Traffic in Arms Regulations (22 CFR §120.62) - a U.S. citizen, lawful permanent resident, or other protected individual. \n5-10 years of professional experience in DevOps, platform, site reliability, security, or software engineering, including at least 3 years with direct responsibility for securing CI/CD pipelines or cloud infrastructure. \nBachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field, or equivalent demonstrated experience. \nProduction experience with at least one major cloud provider (Azure or AWS), including its identity and access management, networking, and logging services. \nHands-on experience building and maintaining pipelines in a modern CI/CD system such as GitHub Actions, GitLab CI, Azure Pipelines, or Jenkins. \nProficiency with infrastructure as code (Terraform, Bicep, CloudFormation, or Pulumi), with changes managed through version control and peer review. \nWorking knowledge of containers and orchestration (Docker and Kubernetes), including image hardening and cluster access control. \nAutomation and scripting ability in Python, Go, Bash, or PowerShell sufficient to build internal tooling and integrate vendor APIs, not solely to configure existing tools. \nPractical experience integrating and operating application security tooling (Blackduck or Rapid7) - SAST, software composition analysis, secrets scanning, and image scanning - and triaging its output. \nSolid grasp of core security concepts, including least privilege, network segmentation, key management, authentication and authorization protocols (OAuth 2.0, OIDC, SAML), and common vulnerability classes such as the OWASP Top 10. \nExperience with Git-based team workflows, code review, and branch protection. \nClear written and verbal communication, with the ability to explain security risk and engineering tradeoffs to both technical and non-technical audiences. \nPreferred Qualifications\nExperience in an export-controlled or otherwise regulated environment (ITAR/EAR, CMMC, NIST SP 800-171), or in aerospace, automotive, or advanced manufacturing. \nExposure to manufacturing or operational technology systems, including securing build, test, or production-floor systems that cannot tolerate unplanned downtime. \nSoftware supply chain security experience wi...","description_format":"text","description_chars":16485,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","3D Printers & Additive Manufacturing","Contract Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-09T03:56:23Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 4","filings_12m":0,"filings_prev_12m":4,"green_card_filings_12m":4,"median_offered_wage_usd":182500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.588,"p_room":1,"age_days":15,"expected_fill_days":54,"reasons":["conf:0","stale_co","win:early","comp:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":156729,"is_top_pay":false},"html_url":"https://alion.io/job/divergent-technologies-devsecops-engineer","json_url":"https://alion.io/job/divergent-technologies-devsecops-engineer.json","meta":{"generated_at":"2026-10-16T17:24:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"search","counted_by":"address","units_charged":0,"used_today":0,"day_limit":null,"remaining_today":null,"minute_limit":null,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58529},"rest":"https://alion.io/mcp/rest/get_company?id=58529"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdivergent-technologies-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdivergent-technologies-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdivergent-technologies-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/divergent-technologies-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdivergent-technologies-devsecops-engineer"}]}