Technical lead responsible for the end-to-end software release pipeline for a platform supporting software distribution to approximately 8 million devices. Focus on designing, building, and professionalizing the release, test, and deployment chain.
Responsibilities
Design and operationalize an end-to-end release, test, and deployment chain.
Design and improve GitHub Actions Workflows for build, test, validation, gates, and controlled releases.
Set up and professionalize the AWS environment, CI/CD, and repository structure.
Ensure software supply-chain security, including SBOM, signing, vulnerability scanning, and traceability.
Translate architecture into concrete technical designs and work packages.
You are the security architect for our research pipeline. You will define how we securely conduct research across our compute cluster and cloud environments, partnering closely with our compute team and engineers to make CI/CD, automated research agents, and large-scale compute secure by default.
Provide operational and technical support to National & Navy missions, ensuring confidentiality, integrity and availability of systems, networks, and data.
Ensure the confidentiality, integrity and availability of systems, networks, and data through planning, analysis, development, implementation, maintenance, and enhancement of information systems security program, policies, procedures, and tools.
Support cybersecurity operations for IT networks, systems, and cloud platforms by applying cybersecurity policies and security engineering principles.
Administer enterprise security tools, including firewalls, zero-trust technologies, logging and metrics systems.
Ensure necessary security controls are in place and operate as intended; advising users of risks to systems and assessing risk; completing and maintaining appropriate security documentation.
Build security guardrails directly into our pipelines so that every deployment (manual or agent-driven) is automatically scanned, verified, and compliant
Establish workflows where agents can test their own code and infrastructure changes against security policies before reaching production
Lead the implementation of 'compliance as code', automating the auditing and enforcement of security configurations across our AWS, GCP, and neocloud footprints in Terraform
Establish and harden the source-control environment for research code (e.g. GitHub): secret scanning, dependency and code scanning, and branch protections