DevSecOps - Classified Compute

The Field Intelligence Operations Division in the National Security Sciences Directorate at the Oak Ridge National Laboratory is seeking qualified applicants for an experienced DevSecOps Engineer/Architect to design, implement, automate, and sustain secure software and infrastructure delivery capabilities supporting classified national security missions. This position will help establish modern DevSecOps practices within highly controlled computing environments where security, configuration management, traceability, reliability, and mission availability are essential. The successful candidate will work across software development, infrastructure engineering, HPC, cybersecurity, Information Assurance, and mission teams to develop secure and repeatable methods for building, testing, deploying, configuring, and sustaining systems and applications. Unlike traditional DevOps positions, this role must account for the unique operational constraints of classified environments, including restricted connectivity, disconnected or air-gapped networks, controlled software introduction, security accreditation requirements, configuration baselines, vulnerability management, and rigorous change control. Major Duties/Responsibilities: Design and implement secure DevSecOps architectures supporting classified applications, infrastructure, and computational environments. Develop and maintain CI/CD pipelines that integrate software development, testing, security validation, deployment, and configuration management. Design DevSecOps solutions capable of operating in disconnected, restricted-connectivity, and air-gapped environments. Develop automated processes for software build, testing, artifact management, security scanning, release management, and deployment. Integrate security controls and security testing throughout the software and infrastructure lifecycle. Implement Infrastructure as Code (IaC) and configuration-as-code practices to improve repeatability, traceability, consistency, and recovery. Develop automated system provisioning and configuration capabilities using technologies such as Ansible, Terraform, Git-based workflows, or comparable platforms. Implement automated compliance validation and configuration enforcement where appropriate. Integrate vulnerability scanning, software composition analysis, static analysis, container scanning, secrets detection, and other security capabilities into delivery pipelines. Support secure container development and deployment, including image creation, scanning, registry management, signing, validation, and lifecycle management. Establish secure artifact repositories and processes for transferring, validating, approving, and distributing software within classified environments. Design solutions supporting software supply-chain security, provenance, integrity verification, dependency management, and controlled software introduction. Develop standardized deployment patterns for Linux servers, HPC environments, containers, applications, and supporting infrastructure. Implement automated testing and validation to reduce deployment risk and configuration drift. Develop monitoring, logging, observability, and alerting capabilities supporting operational and cybersecurity requirements. Partner with Information Assurance and cybersecurity personnel to map automated technical controls and evidence to RMF and ATO requirements. Support the development of repeatable evidence-generation processes for security assessments, configuration reviews, vulnerability management, and continuous monitoring. Assist engineering teams in implementing STIGs, security baselines, hardened configurations, and approved technical standards. Participate in architecture reviews, security reviews, change-control processes, technical interchange meetings, and deployment readiness reviews. Develop documentation, standard operating procedures, reference architectures, pipeline standards, and reusable automation. Mentor software developers, systems engineers, administrators, and other technical personnel in secure development and automation practices. Evaluate emerging DevSecOps technologies and recommend solutions appropriate for classified and mission-critical environments. Deliver ORNL’s mission by aligning behaviors, priorities, and interactions with our core values of Impact, Integrity, Teamwork, Safety, and Service. Promote equal opportunity by fostering a respectful workplace – in how we treat one another, work together, and measure success. Basic Qualifications: BS degree in computer science, computer engineering, cybersecurity, software engineering, information technology, or a related technical field and relevant professional experience. Equivalent combinations of education and experience may be considered. Demonstrated experience with DevOps, DevSecOps, software engineering, systems engineering, or infrastructure automation. Strong Linux administration and scripting experience.