DevSecOps Engineer - Edge Platforms

Overview

We are seeking a DevOps Engineer specializing in Edge Deployments and Embedded Linux systems to build and operate deployment infrastructure for distributed edge platforms. The role involves designing, implementing, and maintaining tools and processes to facilitate continuous integration, delivery, and deployment through containerized workloads, Kubernetes-based orchestration, and automated device lifecycle management. Additionally, the role oversees embedded Linux and device software delivery workflows, including the build and management of OS images, patch generation, packaging, deployment, and update verification within device or edge environments.

You will work closely with development, quality assurance, system administration, and infrastructure teams to design the next generation of our edge deployment and orchestration platform, ensuring that the software development life cycle is efficient, secure, and reliable. Key responsibilities include automating repetitive tasks, reducing manual intervention, and ensuring consistent, repeatable, and secure builds and deployments. The engineer is also tasked with improving overall software product quality and reliability, ensuring compliance with relevant processes and procedures, and maintaining the security of the software supply chain

Responsibilities

Build the Edge Platform

• Design and operate infrastructure that builds, deploys and manages containerized workloads across edge device deployments.
• Architect systems for secure, reliable application delivery to remote embedded systems.
• Build and maintain tooling for device provisioning, configuration, and lifecycle management.
• Build and maintain embedded Linux BSPs and system images for ARM based edge hardware.
• Support board bring up activities, including bootloader, kernel, device tree, drivers, storage layout, and hardware validation.

Kubernetes & Container Orchestration

• Deploy and operate Kubernetes clusters at the edge, with emphasis on K3s or other lightweight distributions.
• Design systems for orchestrating container workloads on resource-constrained hardware.
• Build and maintain container image pipelines and registries optimized for distributed edge deployments.
• Implement declarative deployment workflows using GitOps.

CI/CD for Embedded & Edge Systems

• Build automated pipelines for embedded software builds, container images, and system images.
• Integrate cross-compilation toolchains into CI pipelines.
• Develop safe deployment mechanisms including staged rollouts and automated rollback
• Develop and maintain low level device software and update/install tooling in C, Bash, and Python.

Linux Platform Engineering

• Build and maintain custom embedded Linux platforms.
• Support distributions such as:
• Yocto
• Buildroot
• Debian / Ubuntu
• Optimize systems for container runtimes and Kubernetes operation.

Observability & Fleet Operations

• Build monitoring and observability infrastructure for distributed edge clusters.
• Deploy telemetry pipelines for metrics, logs, and traces.
• Implement tooling for remote debugging, diagnostics, and failure recovery.

Security & Reliability

• Implement secure device provisioning and authentication.
• Build signed update pipelines for OS and container images.
• Implement secrets management and certificate rotation for edge clusters.
• Ensure systems remain resilient in low-bandwidth or intermittent connectivity environments.
• Design and maintain secure boot, TPM backed identity, disk encryption, measured boot, and signed software update flows.
• Build software supply chain controls including SBOM generation, artifact signing, vulnerability scanning, and release verification

Qualifications

5+ years experience in DevOps, SRE, or platform engineering.

• Strong experience with Linux systems engineering.
• Hands-on experience deploying and operating Kubernetes clusters in production.
• Experience working with container technologies (Docker / OCI / containerd).
• Experience building and maintaining CI/CD pipelines.
• Strong scripting or programming experience (C, Bash, Python, Go, or similar).
• Experience with embedded Linux platforms (Yocto, Buildroot).
• Experience with bootloaders, kernel configuration, partitioning, OTA/update systems, and secure device provisioning.
• Proficiency in C for device side tools, services, or platform integration, plus Bash/Python for automation.

Preferred Qualifications

• Experience running Kubernetes at the edge, particularly K3s.
• Experience deploying Kubernetes on ARM-based hardware.
• Familiarity with GitOps tools (ArgoCD, Flux).
• Experience managing large deployments of IoT or edge devices.
• Experience with OTA update systems such as:
• Mender
• RAUC
• SWUpdate
• Familiarity with secure device identity, PKI, and certificate management.
• Experience with infrastructure-as-code tools such as Terraform.
• Experience with U Boot, device tree, kernel bring up, and ARM board support packages.
• Familiarity with TPM, secure boot, disk encryption, attestation, and manufacturing/provisioning flows.
• Experience supporting field recovery, factory image generation, and delta/full OS update strategies.

Technologies We Use

Examples Of Technologies You May Work With

• Linux (embedded and server)
• Kubernetes / K3s
• Docker / containerd
• GitHub Actions / GitLab CI
• Terraform / Ansible
• C / Bash / Python / Go
• Yocto / Buildroot
• Prometheus / Grafana / Loki
• ArgoCD / Flux
• SAST, DAST, SCA
• Maven, Jenkins, Nexus

Benefits

We offer a Total Rewards plan designed with you and your family’s health and wellness in mind that includes:

• Paid days off ( i. e. vacatio n, sick days, bereavement leave)
• Health and Dental plans
• Retirement plans
• Employee and Family Assistance Program (EFAP)
• Employee referral program

We welcome applicants from all backgrounds, regardless of race, color, religion, sex, veteran sta tus, sexual orientation, gender identity, national origin, age, or disabilit y or any other protected characteristics in accordance with applicable federal, state/provincial, and local laws . We 're committed to creating a workplace where everyone feels valued and respected.

We appreciate all responses and will acknowledge only those being considered for an interview .

We respectfully request no calls or unsolicited resumes from Agencies .