Back to jobs

Staff DevSecOps Engineer

Colorado Springs

About Bluestaq
At Bluestaq, we build secure data platforms that matter for space missions, national defense, healthcare systems, and commercial innovation. Founded in 2018, we've become a leader in enterprise software and secure data management by staying focused on what counts: modern architecture, operational excellence, and mission impact.

We're engineers, problem-solvers, and builders who take the mission seriously, but not ourselves. We automate the repeatable, question the status quo, and design systems that are as reliable as they are scalable. Whether we're supporting space, defense systems, or healthcare advancements, we build with the same principles: cloud-native solutions, security by design, and relentless simplicity.

Our name? "Blue" (military shorthand for the good guys) and "staq" (as in software stack). It's who we are, mission-aligned technologists building platforms that protect the world’s most valuable data.

Recognized Excellence We've earned national recognition as one of Inc. Magazine's Fastest-Growing Private Companies and consistently rank among Colorado's Best Workplaces. But what we're most proud of? The systems we build, the teams we develop, and the mission outcomes we enable.

About the Team

The BlueStaq DevSecOps Team designs, builds, and maintains the tools and platform power the Unified Data Library (UDL). We are looking for highly collaborative and security-minded engineers who will bring significant expertise, experience, and energy to our mission of ensuring the secure, reliable, and continuous delivery of our foundational data platform. 
 
Why This Role Matters 

As a DevSecOps Engineer, you will play a crucial role in building and maintaining the platform and tooling that enables secure, efficient software delivery for the Unified Data Library. You'll work hands-on with Kubernetes orchestration, infrastructure as code, and CI/CD pipelines to create seamless developer experiences while serving as a vital link between application teams and production environments. 

Your responsibilities will include designing and implementing deployment processes, integrating security scanning tools into development workflows, and managing automation. You'll modernize applications while establishing best practices that balance security, reliability, and developer velocity. This role requires strong technical expertise and the ability to work independently—you'll own solutions from design through implementation and ongoing support, validating that implementations align with business requirements and advocating for best practices across teams. 

You'll be expected to comprehend how medium-level tasks contribute to overall goals and provide accurate time and effort estimates. This position demands strong problem-solving skills, the ability to develop components independently, and comfort with debugging systems and reading/writing code in complex enterprise environments. 
 
Key Responsibilities: 

  • Design, build, and maintain production environments and CI/CD pipelines for the Unified Data Library 
  • Serve as the bridge between application development teams and the platform, facilitating communication and advocating security best practices 
  • Implement and maintain infrastructure as code using tools like Terraform 
  • Build and support Kubernetes clusters and containerized applications 
  • Integrate security automation, scanning tools, and monitoring into development workflows 
  • Modernize applications using Helm, containers, and CNCF best practices 
  • Establish and facilitate automated deployment processes and GitOps workflows 
  • Collaborate with cross-functional teams to integrate various components into a cohesive platform 
  • Validate solutions to maintain platform integrity and efficiency 
  • Contribute to architectural discussions on secure, cloud-native implementations  

Required Qualifications & Skills:  

  • Strong experience with cloud environments (AWS and/or Azure/GCP) 
  • Expertise in infrastructure-as-code (Terraform or similar) 
  • Hands-on experience with CI/CD pipelines, GitLab/GitHub, and continuous delivery automation 
  • Proficient with YAML and configuration management 
  • Familiarity with GitOps workflows, including git-based declarative configuration and automated reconciliation 
  • Familiarity with Kubernetes and container orchestration 
  • Strong problem-solving skills and ability to work independently 
  • Excellent communication skills and ability to collaborate with development teams 
  • Comfort with debugging systems and performance instrumentation in complex enterprise environments 
  • Knowledge of DevSecOps/DevOps theory and best practices 

Preferred Qualifications & Skills: 

  • Demonstrated proficiency with Kubernetes and container orchestration 
  • Proficiency in at least one programming language (e.g., Python, Go) and shell scripting 
  • Experience with HashiCorp Vault 
  • Experience with security automation, including API Security, Container Security, and Cloud Security 
  • Experience with CNCF projects, Helm, Kustomize, and GitOps practices 
  • Hands-on experience with GitOps tools such as ArgoCD and/or Flux for continuous deployment 
  • Experience implementing and managing ArgoCD Application/ApplicationSets or Flux Kustomizations and HelmReleases 
  • Experience with Big Bang framework for deploying and managing cloud-native applications 
  • Understanding of Big Bang's package structure, values management, and integration patterns 
  • Knowledge of Iron Bank hardened container images and their integration within Big Bang 
  • Experience working in Agile environments 
  • Experience with security scanning tools and compliance requirements 
  • Experience with Department of Defense ATO (Authority to Operate) systems 
  • Experience with C-ATO (Continuous Authority to Operate) processes 
  • DoD 8570 IAT II certification 
  • Certified Kubernetes Administrator (CKA) 
  • Certified Kubernetes Security Specialist (CKS) 
  • HashiCorp Terraform Associate 
  • HashiCorp Vault Associate 
  • Cloud Native Certifications 

Required Education and Experience: 

  • Master’s degree in Engineering, Computer Science, or a related field and 4+ years of DevSecOps or related experience, OR 
  • Bachelor’s degree in Engineering, Computer Science, or a related field and 6+ years of DevSecOps or related experience, OR 
  • Associate degree in a related field and 8+ years of DevSecOps or related experience, OR 
  • High School Diploma/GED and 10+ years of DevSecOps or related experience. 

Salary Range (CO)

$120,000 - $145,000 USD

Clearance Requirement: This position may require the ability to obtain a TS/SCI Clearance. To be eligible for a security clearance, U.S. citizenship is required, and an employee must agree to participate in a background screen and credit check. Eligibility for a TS/SCI Clearance will be assessed as part of the onboarding process or based on programmatic needs.

Physical Requirements:

  • Prolonged periods of sitting at a desk and working on a computer.
  • Must be able to lift up to 15 pounds at times.
  • Must be able to access and navigate each department at the organization's facilities.

Relocation: This position does not offer relocation. Candidates must live in the immediate area or relocate at their own expense.

Bluestaq is an Equal Opportunity Employer. We prohibit unlawful discrimination against applicants or employees on the basis age 40 and over, color, disability, gender identity, genetic information, military or veteran status, national origin, race, religion, sex, sexual orientation, or any other status protected by state or local law.

Bluestaq will make reasonable accommodations for qualified individuals with known disabilities and employees whose work requirements interfere with a religious belief unless doing so would result in an undue hardship to Bluestaq or a direct threat. Employees needing such accommodation are instructed to contact Human Resources immediately at contact.us@bluestaq.com.

Date the Position Closes: Applications will be accepted for 60 days beyond the posting date, or until the position is filled, whichever comes first.

Create a Job Alert

Interested in building your career at Bluestaq US External? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.
Select...
Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Bluestaq US External’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.