Divergent

DevSecOps Engineer (Cloud Security)

In short

This hybrid DevSecOps Engineer role in Torrance, California builds and hardens secure CI/CD pipelines, cloud infrastructure, and software supply chain controls for a manufacturing platform serving automotive, aerospace, and defense industries. The job centers on Azure/AWS provisioning via infrastructure-as-code, Kubernetes and Docker hardening, secrets and credential management, and vulnerability remediation, requiring 5–10 years of relevant experience and U.S. Person status under ITAR. It demands hands-on skills with Terraform, Python/Go/Bash/PowerShell, and security tooling like Black Duck or Rapid7.

Location
Hybrid on-site role in Torrance, California, United States, primarily in the office and laboratory, with periodic work on the manufacturing floor. Standard hours are Monday through Friday during core business hours, with occasional after-hours deployment, maintenance, and incident-response windows. Access to export-controlled technical data requires U.S. Person status.
Salary
$115,843–$180,977 USD annually, depending on level.
Company
Divergent builds integrated engineering and manufacturing systems for automotive, aerospace, defense, and other demanding industries.
What you will do
•Design and maintain CI/CD pipelines with automated static analysis, software composition analysis, secrets detection, image scanning, and infrastructure-as-code policy checks.
•Provision and secure Azure and AWS infrastructure using infrastructure as code and policy-as-code controls.
•Harden Docker and Kubernetes workloads, including admission control, runtime policies, network segmentation, and least-privilege identities.
•Manage secrets, federated authentication, short-lived credentials, vulnerability remediation, and software supply chain controls such as artifact signing and SBOM generation.
•Build security observability through detections, dashboards, alerting, and cloud security posture automation, and participate in incident response.
•Support compliance evidence collection and raise engineering security standards through reusable templates, code review, documentation, and mentoring.
Requirements
•Must be a U.S. Person under ITAR, such as a U.S. citizen, lawful permanent resident, or other protected individual.
•5–10 years of experience in DevOps, platform, SRE, security, or software engineering, including at least 3 years securing CI/CD pipelines or cloud infrastructure.
•Bachelor's degree in a relevant technical field or equivalent demonstrated experience.
•Production experience with Azure or AWS, including identity, networking, and logging services.
•Hands-on experience with modern CI/CD systems, Terraform or comparable infrastructure-as-code tools, Docker, Kubernetes, Git workflows, and branch protection.
•Automation experience with Python, Go, Bash, or PowerShell, plus application security tooling such as Black Duck or Rapid7 and knowledge of core security concepts, OAuth 2.0, OIDC, SAML, and OWASP Top 10.
Nice to have
•Experience with ITAR/EAR, CMMC, NIST SP 800-171, aerospace, automotive, advanced manufacturing, or operational technology.
•Experience with SBOM, artifact signing, SLSA, policy-as-code, Kubernetes security, secrets platforms, SIEM, threat modeling, and observability tooling.
•Relevant security or cloud certifications and contributions to internal developer platforms or open-source security tooling.
Culture & Benefits
•Collaborative, high-performing, mission-driven environment focused on integrating people and technology in manufacturing.
•Paid vacation, sick time, company holidays, year-end shutdown, and paid parental leave.
•HMO and Premium PPO health plans, company-sponsored life insurance, and short- and long-term disability coverage.
•Learning and development reimbursement, equity plan, and discretionary results-based incentive bonus opportunities.
•Shared on-call rotation for pipeline and infrastructure incidents; occasional manufacturing-floor work requires personal protective equipment.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot