CI/CD Pipeline Engineer

Published

The CI/CD Pipeline Engineer will possess deep expertise in Linux operating systems and continuous integration/continuous deployment (CI/CD) pipelines to support a large-scale OS upgrade project. The role will focus on transitioning from CentOS to RHEL and Rocky Linux due to critical cybersecurity requirements. As a part of the engineering team, you will be responsible for designing, automating, and maintaining a secure CI/CD pipeline while ensuring that OS upgrade efforts adhere to cybersecurity best practices. The ideal candidate should have a strong background in system administration, automation, and cybersecurity.

  • Responsibilities:
  • Execute OS upgrades from CentOS to RHEL/Rocky Linux with an emphasis on cybersecurity.
  • Design, build, and maintain CI/CD pipelines using GitLab.
  • Automate infrastructure provisioning and configuration using Infrastructure-as-Code (IaC) tools like Terraform.
  • Containerize applications using Docker and manage package dependencies with RPM-based tools (rpmbuild, yum, dnf).
  • Collaborate with security teams to integrate cybersecurity tools and standards into the CI/CD pipeline (e.g., SAST, dependency scanners).
  • Contribute to OS hardening efforts in line with NIST cybersecurity standards.
  • Required Skills:
  • Expertise in Linux distributions, particularly Fedora, RHEL, or Rocky.
  • Proficient in building and managing CI/CD pipelines using GitLab.
  • Hands-on experience with AWS cloud services, EC2, auto-scaling groups, and ECR
  • Proficient in Infrastructure as Code (IaC) using Terraform or Terragrunt.
  • Knowledge of Docker / K8s containerization.
  • Familiarity with RPM-based package management (rpmbuild, yum, dnf).
  • Proficient in Python package management using pip and associated tooling
  • Preferred Skills:
  • Experience with image creation tools such as Packer.
  • Familiarity with software artifact repositories such as Nexus, Artifactory Pro.
  • Familiarity with cybersecurity tools like SAST (e.g., mend.io) and dependency scanners (e.g., Checkmarx).
  • Knowledge of cybersecurity standards like NIST.
  • Previous experience in space or telemetry-focused projects is a strong plus.
  • Prior experience in DevSecOps roles, particularly in environments focused on secure software delivery and compliance.
  • Familiarity with space industry projects or telemetry/commanding systems is a significant advantage.