R&D DevSecOps Engineering Scientist

Job Posting Title:

R&D DevSecOps Engineering Scientist

-

Hiring Department:

Applied Research Laboratories

-

Position Open To:

All Applicants

-

Weekly Scheduled Hours:

40

-

FLSA Status:

Exempt from FLSA

-

Earliest Start Date:

Immediately

-

Position Duration:

Expected to Continue

-

Location:

PICKLE RESEARCH CAMPUS

-

Job Details:

Purpose

Position will integrate security practices directly into the software development lifecycle (SDLC). This position builds and maintains secure development and deployment processes, implements security controls throughout the software lifecycle, ensures compliance with organizational security standards, and enables project teams to adopt DevSecOps practices across their workflows.

Responsibilities

Establish and Enhance Secure CI/CD: Design, implement, and maintain secure continuous integration/deployment pipelines to meet project requirements. Develop and enhance automated build, test, and deployment processes. Integrate automated security scanning tools. Implement Security-as-Code and Policy-as-Code practices into CI/CD to ensure safe and secure code for production. Integrate security gates that block vulnerable code from progressing to production.

Infrastructure & Cloud Security: Implement and maintain security for Infrastructure as Code. Configure and enforce network security policies. Manage secrets securely using enterprise secret management solutions. Harden cloud environments including IAM roles, security groups, and logging. Establish and improve basic IaC approaches across project codebases.

Vulnerability Management & Compliance: Perform regular security scans and assess results across applications and dependencies. Identify, prioritize, track, and help remediate vulnerabilities. Establish vulnerability remediation workflows. Coordinate periodic security testing and assessments. Automate compliance checks for relevant standards. Implement automated compliance controls. Maintain audit trails and documentation for security controls. Support internal and external security audits.

Security Enablement & Collaboration: Partner with development teams to promote secure coding practices and increase DevSecOps adoption across projects. Provide security guidance and training to engineers. Help squads integrate DevSecOps practices into their workflows. Contribute to security policies and standards.

Incident Response: Participate in security incident response and investigation. Support systems administration duties as needed, including privileged user access to support systems at ARL and partner sites.

Other related functions as assigned.

Required Qualifications

Bachelor's degree in engineering, computer or information science, or other applied sciences.

Three years of experience in DevOps, SRE, or security engineering roles

Experience with CI/CD tools such as GitHub Actions, GitLab CI, Jenkins, or ArgoCD

Experience with continuous integration and deployment systems

Proficiency with at least one major cloud platform

Experience with Infrastructure as Code methodologies

Experience with Linux administration

Knowledge of container technologies and container security

Familiarity with security scanning and testing methodologies

Understanding of security best practices for software development

Familiarity with identity and access management principles

Strong problem-solving and analytical skills

Excellent communication skills with ability to explain security concepts to non-technical audiences

Strong documentation skills

Must currently hold, or be able to obtain within the first six months of employment, a DoD 8140 compliant security certification (e.g., Security+)

Applicant must be highly organized, have excellent attention to detail, and possess sound scientific judgment. The position will require effective management of their own time with the ability to plan, coordinate, and execute multiple tasks simultaneously. Regular and punctual attendance in the workplace is required.

US Citizen. Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information at the level appropriate to the project requirements of the position.

Preferred Qualifications

Experience with maintaining, securing, and monitoring applications/datastores in AWS

Experience with container orchestration platforms such as Kubernetes or ECS

Experience with secret management solutions such as HashiCorp Vault or AWS Secrets Manager

Experience in incident response or security operations

Experience with classified systems or in classified environments

Eligibility for immediate access to classified information.

DoD 8140 compliant certifications (e.g., CISSP, Security+, GSEC)

AWS certifications such as Solutions Architect, Security Specialty, or SysOps Administrator

Knowledge of compliance frameworks such as SOC 2, PCI-DSS, HIPAA, or ISO 27001

Ten or more years experience in software engineering or DevOps.

Cumulative GPA of 3.0.

General Notes

An agency designated by the federal government handles the investigation as to the requirement for eligibility for access to classified information. Factors considered during this investigation include but are not limited to allegiance to the United States, foreign influence, foreign preference, criminal conduct, security violations, drug involvement, the likelihood of continuation of such conduct, etc.

Please mark "yes" on the application question that asks if additional materials are required. Failure to attach all additional materials listed below may result in a delay in application processing.

Visit our website (www.arlut.utexas.edu) for additional information about Applied Research Laboratories.

UT Austin offers a competitive benefits package that includes:

100% employer-paid basic medical coverage

Retirement contributions

Paid vacation and sick time

Paid holidays

Please visit our Human Resources (HR) website to learn more about the total benefits offered.

Salary Range

$104,000-$174,000+/negotiable depending on qualifications.

Working Conditions

Standard office conditions

Repetitive use of a keyboard at a workstation

Use of manual dexterity

Some weekend, evening and holiday work

Possible interstate/intrastate travel

Required Materials

Resume/CV

3 work references with their contact information; at least one reference should be from a supervisor

Letter of interest

Unofficial College transcripts

Important for applicants who are NOT current university employees or contingent workers: You will be prompted to submit your resume the first time you apply, then you will be provided an option to upload a new Resume for subsequent applications. Any additional Required Materials (letter of interest, references, etc.) will be uploaded in the Application Questions section; you will be able to multi-select additional files. Before submitting your online job application, ensure that ALL Required Materials have been uploaded. Once your job application has been submitted, you cannot make changes.

Important for Current university employees and contingent workers: As a current university employee or contingent worker, you MUST apply within Workday by searching for Find UT Jobs. If you are a current University employee, log-in to Workday, navigate to your Worker Profile, click the Career link in the left hand navigation menu and then update the sections in your Professional Profile before you apply. This information will be pulled in to your application. The application is one page and you will be prompted to upload your resume. In addition, you must respond to the application questions presented to upload any additional Required Materials (letter of interest, references, etc.) that were noted above.

-

Employment Eligibility:

Regular staff who have been employed in their current position for the last six continuous months are eligible for openings being recruited for through University-Wide or Open Recruiting, to include both promotional opportunities and lateral transfers. Staff who are promotion/transfer eligible may apply for positions without supervisor approval.

-

Retirement Plan Eligibility:

The retirement plan for this position is Teacher Retirement System of Texas (TRS), subject to the position being at least 20 hours per week and at least 135 days in length.

-

Background Checks:

A criminal history background check will be required for finalist(s) under consideration for this position.

-

-

Pay Transparency:

The University of Texas at Austin will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

-

Employment Eligibility Verification:

If hired, you will be required to complete the federal Employment Eligibility Verification I-9 form. You will be required to present acceptable and original documents to prove your identity and authorization to work in the United States. Documents need to be presented no later than the third day of employment. Failure to do so will result in loss of employment at the university.

-

E-Verify:

The University of Texas at Austin use E-Verify to check the work authorization of all new hires effective May 2015. The university’s company ID number for purposes of E-Verify is 854197. For more information about E-Verify, please see the following:

E-Verify Poster (English and Spanish) [PDF]

Right to Work Poster (English) [PDF]

Right to Work Poster (Spanish) [PDF]

-

Compliance:

Employees may be required to report violations of law under Title IX and the Jeanne Clery Disclosure of Campus Security Policy and Crime Statistics Act (Clery Act). If this position is identified a Campus Security Authority (Clery Act), you will be notified and provided resources for reporting. Responsible employees under Title IX are defined and outlined in HOP-3031.

The Clery Act requires all prospective employees be notified of the availability of the Annual Security and Fire Safety report. You may access the most recent report here or obtain a copy at University Compliance Services, 1616 Guadalupe Street, UTA 2.206, Austin, Texas 78701.