The Role Fortastra is seeking a
Staff DevOps Engineer with strong cloud and DevSecOps experience. You will architect secure CI/CD pipelines, cloud infrastructure, participate in secure design for space vehicles and ground segments. You will focus on reliability, automation, and security, enabling engineers to ship quickly while staying within well-defined guardrails.
You'll be a hands-on engineer who treats infrastructure code, build pipelines, and release processes as product security controls, and who understands the spacecraft and ground segment well enough to know what those controls need to protect.
Key Responsibilities - Own software supply chain and build integrity, including SBOMs, provenance, and artifact signing
- Build security gates into CI/CD for flight and ground software, including static analysis, fuzzing, and vulnerability scanning
- Own the key and signing lifecycle for builds, releases, and firmware, and align it with command authentication and secure update
- Write Terraform to secure ground and mission environments in AWS GovCloud, including segmentation, IAM, and boundary controls
- Define how development, simulator, hardware-in-the-loop, and flight-representative environments are isolated and promoted
- Run vulnerability triage processes across containers, dependencies, cloud configuration, and flight and ground code
- Own logging and detection across pipelines, cloud, and ground systems, and extend it toward mission telemetry
- Generate NIST 800-53 and 800-171 compliance evidence from pipeline and infrastructure state, and support classified accreditation
Required Qualifications and Skills - A security mindset: you think like an adversary and communicate risk in terms engineers and leadership can act on
- Strong hands-on Terraform and AWS experience, ideally GovCloud or other regulated environments
- Experience securing CI/CD pipelines and software delivery (scanning, signing, secrets, supply chain)
- Strong network security and architecture skills in cloud and hybrid environments
- Architectural understanding of securing space systems, including the vehicle, the ground segment, and the links between them
- Defense or other regulated-environment experience, with working knowledge of NIST frameworks
Preferred Qualifications - Hands-on embedded, firmware, or flight software security experience
- Knowledge of RF links, satellite communications, and ground station implementation
- Experience with KMS/HSM, code signing, or PKI
- Scripting or programming skills (Python, Go, Bash; C/C++)
- Experience supporting classified system accreditation
- Certifications such as CISSP, AWS Security Specialty, CCSP, or OSCP
Requirements - 5 days on-site in Torrance, CA
- U.S. Citizenship required
- Ability to obtain or hold an active TS/SCI clearance
BenefitsWe take care of our employees so they can focus on what matters most: family, well-being, and life outside of work.
Unlimited Paid Time Off so that you have the time you need to rest and recharge.
Comprehensive Healthcare: Medical, dental, and vision coverage for you and your dependents, because peace of mind starts with feeling cared for.
Equity: Share in Fortastra's success with equity in the company you're helping build.
401(k): A 401(k) plan to help you invest in your future and plan for what's ahead.
Social Events: Regular social events, team outings, and company-sponsored activities that make this a place people are glad to be part of.
The pay range for this role is $232,500.00 - $266,250.00. Where an offer falls within that range depends on factors like your qualifications, experience, location, and interview performance, which we weigh against the market rate for the position.
Recruiters & Agencies: Fortastra does not accept unsolicited resumes or candidate submissions from recruiters, agencies, or third parties. Any candidate submitted without a signed agreement and prior written authorization from Fortastra will not be subject to any fee, and no relationship is implied. Please do not contact Fortastra employees, hiring managers, or recruiting team directly.
