{"id":3899602,"url":"https://alion.io/job/yurts-ai-staff-devsecops-engineer","title":"Staff DevSecOps Engineer","company":{"id":688163,"name":"Yurts AI","domain":"yurtsai.com","url":"https://alion.io/company/yurtsai","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":5,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":102,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":182750,"max":215000,"currency":"USD","period":"year","gross":null,"usd_annual":215000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon S3","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"ElasticSearch","optional":false},{"name":"FluxCD","optional":false},{"name":"Gateway API","optional":false},{"name":"Git","optional":false},{"name":"GitLab","optional":false},{"name":"GitOps","optional":false},{"name":"Grafana","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"Istio","optional":false},{"name":"Keycloak","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kustomize","optional":false},{"name":"Kyverno","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Prometheus","optional":false},{"name":"Python","optional":false},{"name":"Qdrant","optional":false},{"name":"SBOM","optional":false},{"name":"SOPS","optional":false},{"name":"Terraform","optional":false},{"name":"vLLM","optional":true}],"status":"live","first_seen_at":"2026-11-06T20:53:36Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T13:06:47Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Legion\nLet’s be real, AI isn’t magic; Legion was built to move beyond AI hype-delivering secure, reliable systems that work alongside the people tackling the world’s most critical challenges.\nBorn from a Department of Defense partnership and trusted by leaders across government and enterprise, Legion embeds intelligence inside complex systems, unlocking data, accelerating human workflows, and strengthening mission-critical systems. We don’t replace workflows-we optimize them, ensuring quality, efficiency, and reliability inside the platforms our partners already use.\nWith world-class collaborators like Palantir, Nvidia, HPE, and Oracle, we’re building intelligent infrastructure that enhances human capability and drives impact at the edge and across a range of enterprises.\nWe’re looking for bold thinkers and doers to join us in shaping the future of AI that’s secure, grounded, and built to work.\nLocation: US - remote with travel (up to 50%). \nClearance: Active US Department of War (DoW) or Intelligence TS required.\nLegion Intelligence is the agent workspace where national security work comes back done. Legion runs on the systems and networks mission teams already use, including classified networks and places with no connection at all.\nEach Legion Pack is set up for a specific job, so the reports, plans, and work orders teams build by hand arrive finished and ready to approve. People decide who can act, on what data, and when. Agents do the work. You stay in charge.\nWe’re looking for a Staff DevSecOps Engineer who will set technical direction across Platform DevOps and customer delivery. You will shape the engineering systems and practices that take Legion from development to dependable operation, enabling teams to deliver improvements faster and customers to realize mission value sooner.\nJob Description:\nThis position requires a US DoW or Intelligence TS/SCI clearance.\nAs a Staff DevSecOps Engineer on the Mission Engineering team, which also owns Platform DevOps, you will provide technical leadership across internal build and release systems, platform operations, and customer deployments. You will work directly with customer mission owners, IT teams, and security stakeholders to understand their needs, achieve technical alignment, and deliver Legion into their operating environments. You will define the architecture and improvement roadmap for this domain and lead complex initiatives from problem definition through deployment, adoption, and measured results. Your scope includes internal CI/CD, observability and alerting, vulnerability posture, deployment automation, and production reliability. You will translate mission needs and operating constraints into technical decisions, resolve tradeoffs across teams, and turn recurring delivery barriers into durable improvements to Legion. You will remain hands-on in delivering the platform to customers while guiding engineers and establishing practices that make the whole team more effective.\nResponsibilities:\nSet and drive the technical roadmap for Platform DevOps and customer deployment engineering. Identify the constraints that most limit delivery of mission value, build the case for investment, and lead improvements with clear outcomes for delivery speed, reliability, and security.\nOwn technical alignment with customer stakeholders throughout delivery. Lead architecture and readiness discussions with mission owners, IT teams, and security reviewers; agree on deployment approach, integration requirements, responsibilities, and acceptance criteria; and resolve technical disagreements and dependencies with clear decisions and follow-through.decisions, integrations, and accelerate implementation.\nDefine the architecture and standards for repeatable deployment and lifecycle automation across internal and customer environments. Lead adoption of reusable approaches for provisioning, configuration, upgrades, backups, and patching using Kubernetes, Flux, Terraform, Helm, Docker, and related technologies.\nLead the architecture for integration with customer identity and access systems. Resolve complex authentication and authorization requirements with customer and product engineering stakeholders, and establish patterns that future deployments can reuse.\nOwn the technical direction and effectiveness of internal CI/CD and release infrastructure. Lead improvements to build reliability, automated validation, artifact integrity, and release promotion so engineering teams can deliver changes safely and consistently.\nOwn the technical strategy for vulnerability posture across platform infrastructure, deployment artifacts, and third-party containers and dependencies. Establish risk-based prioritization, remediation expectations, and visibility into outstanding exposure; drive fixes with engineering and security owners and verify their closure.\nProvide technical leadership during complex incidents and investigations. Guide diagnosis across system boundaries, coordinate customer and engineering stakeholders, and ensure root-cause findings lead to lasting architectural and operational improvements.\nLead the technical approach to deployment authorization and security evidence. Translate Authorization to Operate (ATO), Certification to Field (CTF), and Risk Management Framework (RMF) requirements into engineering work, and establish repeatable ways to produce and maintain the required evidence.\nQualifications:\nAn active US DoW or Intelligence TS/SCI clearance.\nA BS degree or higher in Computer Science, Engineering, or related fields.\nCompTIA Security+ Certification.\n6+ years of experience in DevOps, DevSecOps, or software engineering, with demonstrated technical leadership of complex initiatives. Ability to set architectural direction, guide engineers across teams, and translate customer and engineering needs into delivery priorities and measurable outcomes. \nProven experience engaging directly with customer technical and mission stakeholders, explaining architectural tradeoffs, achieving agreement on delivery plans, and taking hands-on responsibility for deploying software into customer environments.\n4+ years of experience deploying software and/or managing software deployments in US Government classified networks.\nStrong working knowledge of cloud infrastructure and infrastructure as code (e.g., Terraform), including networking, load balancing, IAM, compute, and storage in those environments.\nDeep production experience with Kubernetes, Linux, and Helm. Ability to lead diagnosis and architectural decisions across cluster networking, storage, RBAC, operators and CRDs, upgrades, availability, and resource constraints.\nExperience designing and evolving GitOps delivery systems using tools such as FluxCD and Kustomize, including reconciliation, environment configuration, release promotion, rollback, and drift management.\nExperience owning internal CI/CD infrastructure, such as GitLab pipelines, self-hosted runners, and container registries. Ability to establish reusable pipelines, protect releases and credentials, and coordinate delivery across services.\nExperience designing secure, reproducible container builds using Docker and tools such as BuildKit or Buildx, including AMD64/ARM64 builds, image digests, build caching, and artifact promotion.\nExperience defining and improving software supply-chain security and vulnerability posture. Ability to integrate code, dependency, container, secret, and infrastructure scanning into software development lifecycles, prioritize remediation, and establish SBOM, signing, and attestation practices.\nStrong understanding of secure service networking and access controls. Ability to diagnose ingress, service communication, DNS, and TLS using technologies such as Istio and Kubernetes Gateway API; secure configuration and enforce least privilege through tools such as SOPS, Kyverno, and cloud IAM.\nStrong working knowledge of operating stateful services such as PostgreSQL, Elasticsearch, Qdrant, and S3-compatible storage. Ability to guide capacity planning, persistence, migrations, backups, restoration, upgrades, and failure recovery.\nProficiency building maintainable automation in Python or Bash, with fluency in Git and YAML/JSON configuration. Ability to debug across infrastructure and application boundaries and turn recurring problems into reusable engineering improvements.\nStrong working knowledge of metrics, logs, traces, and incident diagnosis using tools such as Grafana, Prometheus, and OpenTelemetry. Ability to define service-level objectives, own actionable alerting, and guide improvements based on operational evidence.\nStrong working knowledge of authentication and identity federation using technologies such as Keycloak and OIDC/OAuth2, including token validation and service authorization. Ability to resolve identity issues across customer, platform, and application boundaries.\nMust be eligible to work in the US without sponsorship.\nPreferred Qualifications:\nExperience designing packaging and delivery for restricted or disconnected environments using tools such as Defense Unicorns UDS Core or Zarf, including dependency bundles, SBOMs, attestations, and controlled publishing.\nExperience operating GPU workloads and model-serving infrastructure using technologies such as NVIDIA GPU Operator or vLLM, including scheduling, driver compatibility, GPU memory constraints, and inference capacity. \nExperience applying these skills in a startup environment is also valuable.\nWhy Join Us: You will shape the engineering foundation that helps Legion reach customers and deliver mission value. Your work will influence both how our engineers build and release the product and how customers operate it on their own networks. This is a hands-on technical leadership role with room to drive architectural decisions, develop other engineers, and deliver improvements whose impact extends across deployments. We offer competitive compensation and benefits and support professional growth and development.\nCompensation Information\n$182,750—$215,000 USD\nEqual Opportunity Statement\nLegion provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.","description_format":"text","description_chars":10498,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","AI Agents","Defense AI"],"lifecycle":[{"event":"open","at":"2026-11-07T00:18:06Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":102,"reasons":["conf:0","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":215000,"is_top_pay":true},"html_url":"https://alion.io/job/yurts-ai-staff-devsecops-engineer","json_url":"https://alion.io/job/yurts-ai-staff-devsecops-engineer.json","meta":{"generated_at":"2026-11-07T16:04:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22426,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":688163},"rest":"https://alion.io/mcp/rest/get_company?id=688163"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fyurts-ai-staff-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fyurts-ai-staff-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fyurts-ai-staff-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/yurts-ai-staff-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fyurts-ai-staff-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3899602}},{"tool":"search_jobs","arguments":{"company":"yurtsai.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3899602},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}