DevSecOps Engineer

The posting, as Divergent wrote it

Divergent is building the new industrial age. Every day, our teams design, manufacture, and assemble advanced systems for some of the world’s most demanding industries. Our integrated engineering and manufacturing platform transforms complex designs into production-ready solutions, helping customers move faster, build smarter, and deliver critical systems when they matter most. Divergent is a qualified Tier 1 supplier to global automotive OEMs and supports leading U.S. aerospace and defense companies.

Join us and help push the boundaries of what can be built.

Purpose

We are seeking a DevSecOps Engineer to embed security into every stage of the software delivery lifecycle, from the first commit through production operation. Divergent Technologies Inc. builds and operates a digital manufacturing platform in which software, hardware, and physical production are tightly coupled, which means the pipelines that ship our code warrant the same protection as the code itself. In this role you will own the automation that makes secure delivery the default rather than the exception: hardened CI/CD pipelines, policy-as-code guardrails, reproducibly provisioned cloud infrastructure, and vulnerability findings that reach the responsible engineer with enough context to act on. You will partner with software, platform, and IT teams to reduce risk without slowing delivery, treating security controls as engineering problems to be solved with tooling rather than checklists to be enforced after the fact.

The Role

• Design, build, and maintain CI/CD pipelines with automated security gates — static analysis, software composition analysis, secrets detection, container image scanning, and infrastructure-as-code policy checks — that fail fast and produce actionable findings.
• Provision and manage cloud infrastructure as code across Azure and AWS environments and enforce configuration standards through policy-as-code rather than manual review.
• Harden container and Kubernetes workloads, including base image lifecycle, admission control, runtime policy, network segmentation, and least-privilege workload identity.
• Own secrets management and pipeline authentication — vaulted credentials, short-lived tokens, and federated identity — and drive the elimination of long-lived static keys.
• Triage and prioritize vulnerability findings across source code, third-party dependencies, container images, and cloud posture; partner with engineering owners to drive remediation to closure against defined service levels.
• Build and maintain software supply chain controls, including dependency and lockfile hygiene, artifact signing and provenance, and software bill of materials generation and distribution.
• Instrument delivery and runtime environments for security observability by defining detections, dashboards, and alerting, and participate in response for pipeline and infrastructure incidents.
• Automate cloud security posture assessment and remediation across accoun

[…]
thin a fast-paced, mission-driven company. Together, we're disrupting the traditional manufacturing industry, fostering innovation, and integrating people and technology to reduce our footprint.

Equal Employment Opportunity
Divergent is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected characteristic. Divergent provides affirmative action in employment for qualified Individuals with Disabilities and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.
EEO Poster

In order to adjust to changes in our business, it may become necessary to add, remove or modify certain duties and responsibilities, or to reassign you to another job position. From time to time you may be asked to work on special projects or to assist with other work. Your cooperation and assistance in performing such additional work is expected.

E-Verify: Right to Work
Our company participates in E-Verify . E-Verify is a program that electronically confirms a candidate’s eligibility to work in the United States after completing the Employment Eligibility Verification (Form I-9). The information provided on the Form I-9 is compared to the records contained in the Social Security Administration and Department of Homeland Security (DHS) databases. This helps employers verify the identity and employment eligibility of newly hired employees.
Eligibility to Work Poster (English) | Eligibility to Work Poster (Spanish)

Los Angeles Fair Chance Initiative for Hiring Ordinance (FCIHO)
Pursuant to the Los Angeles Fair Chance Initiative for Hiring Ordinance (FCIHO), we will consider for employment qualified applicants with arrest and conviction records.

No agencies, no solicitations, and no calls please.