Boulder, CO

Salary
$148,300–$266,900from the description
Posted
Jul 17, 2026
Location
Boulder, CO
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

A fully onsite senior engineering role in Boulder, CO, supporting a classified space portfolio. The position centers on architecting and operating secure CI/CD pipelines, containerized infrastructure (Kubernetes, Docker), and cloud/on-prem environments using Infrastructure as Code tools, while embedding security controls across the software development lifecycle. It suits an experienced DevSecOps practitioner holding an active DoD Secret clearance who is comfortable leading technical direction across engineering, cybersecurity, and operations teams.

Senior level · 10+ years · Boulder, CO · Secret clearance · Full-time

Must have (15)
Secret clearanceLinuxRHELBashPythonKubernetesDockerTerraform, Ansible, AWS or PulumiCI/CDSASTDASTGitJava, C#, Go, JavaScript or TypeScriptArtifactory, Harbor, Nexus or Docker RegistryOPA, Conftest or Checkov
Nice to have (5)
Helm or KustomizeRKE2, Red Hat Openshift or RancherGitLab CI, GitHub Actions, Azure DevOps or JenkinsVMwareMBSE

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What gives you an edge
SAST4%DAST4%

Rare in this occupation — lead with these, and say what you built with them.

What won't set you apart
Java62%Docker53%Python51%Linux45%CI/CD45%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $168,179 (middle half $132,051–$211,194). This posting is about at that midpoint.

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (11)

The role is fully onsite in Boulder, CO — remote work is not offered.

An active Secret clearance is a hard gate; the posting also states eligibility and willingness to obtain TS/SCI, but only Secret is listed as the active requirement for hire.

The 10+ years requirement explicitly allows education to count toward total experience and notes 'potential flexibility pending Customer approval,' so the floor is soft in practice.

A Bachelor's degree is listed under required qualifications but the posting immediately offers 'additional years of experience in lieu of a degree,' so no minimum degree is flagged as a hard gate.

Terraform is listed alongside Ansible, CloudFormation, and Pulumi as acceptable IaC toolsets; all four are captured as alternatives on a single required IaC skill.

Java is listed as one of several acceptable primary programming languages (C#, Python, Go, JavaScript/TypeScript); alternatives are captured accordingly.

RKE2, OpenShift, and Rancher appear in both the required and desired sections as Kubernetes distribution options; they are captured as preferred alternatives under the Kubernetes distribution skill.

GitLab CI, GitHub Actions, Azure DevOps, and Jenkins are all named as example CI/CD platforms in the responsibilities section; GitLab CI also appears under desired skills. They are grouped as preferred alternatives since the required skill is CI/CD capability broadly.

The SOC classification is Medium confidence: the role writes and ships IaC and pipeline code (pointing to 15-1252 Software Developers), but also carries substantial Linux systems administration and infrastructure operations duties (pointing to 15-1244). The primary day-to-day work leans toward building and automating, so 15-1252 is selected with 15-1244 as the runner-up.

MBSE and test automation appear only under desired skills and are marked preferred accordingly.

Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗