Senior DevOps Engineer

Drive the delivery lifecycle of Skapion's multi-disciplinary systems, building and maintaining the infrastructure, pipelines, and practices that take software from code to production. The role bridges two worlds: fully air-gapped environments for code, builds, and production, and cloud-based environments for automated testing and labs. The DevOps Engineer ensures both sides work together as one consistent, secure, and reliable delivery flow.

The Mission

Your mission is to make sure Skapion's software gets from code to production reliably and securely. You will connect the air-gapped world of code, builds, and production with the cloud-based world of automated testing and labs, so that both work together as one consistent delivery flow.

Why Join Skapion?

• Own it end to end: Take your work from idea to production, and keep owning it after it ships.

• Build a rare setup: Deliver pipelines that span fully air-gapped environments and cloud-based test labs as one consistent flow.

• Work across disciplines: Support software, systems, hardware, and QA teams building multi-disciplinary systems. • Security first: Work in an environment where security and attention to detail come first.

• Shape how the team works: Help improve the way the team delivers.

Responsibilities

• Build and maintain the infrastructure, pipelines, and practices that take software from code to production.

• Run CI/CD pipelines for multi-language, multi-discipline systems, with integrated testing, static code analysis, and security scanning.

• Connect work management, source control, and requirements tools into one workflow, with automated traceability from requirements to test results.

• Operate air-gapped environments: internal registries and mirrors, offline install and upgrade workflows, secure artifact transfer, and isolated Git, CI runners, DNS, NTP, and PKI.

• Provision and maintain virtual and cloud test labs, and keep them consistent with the air-gapped production stack.

• Run production Kubernetes and Linux infrastructure, hardened and secure.

Requirements

SDLC and CI/CD

• 4+ years building and maintaining CI/CD pipelines (Azure DevOps/GitHub Actions/ GitLab CI/ Jenkins/ Argo CD/Flux)
• Strong grasp of the SDLC: branching, versioning, artifact and release management, rollback
• Pipelines for multi-language, multi-discipline systems, with integrated testing, static code analysis, and security scanning

Development tooling, integration, and traceability

• Connecting work management, source control, and requirements tools into one workflow
• Automating links between requirements, work items, commits, pull requests, builds, and test results, using REST APIs, webhooks, and CI hooks
• Self-hosting and administering these tools, including in disconnected networks: SSO/LDAP, backups, upgrades, and permissions

Linux

• Advanced administration: systemd, networking, storage, SELinux/AppArmor, troubleshooting
• Bash plus Python; system hardening (CIS/STIG)

Containers and Kubernetes

• Deep Docker/OCI knowledge: multi-stage builds, hardened images, image signing
• Production Kubernetes across several flavors (RKE2/K3s/K0s/OpenShift/MicroK8s, managed EKS/AKS/GKE), with Helm, CNI/CSI,RBAC, and upgrades

Air-gapped operations

• Internal registries and mirrors (Harbor, Nexus, Artifactory) for images, OS packages, and language dependencies
• Offline install and upgrade workflows with signed bundles and integrity verification
• Secure artifact transfer across the boundary, SBOM, and offline vulnerability tracking
• Running Git, CI runners, DNS, NTP, and PKI in isolation

IaC and cloud/virtual environments

• Terraform, Ansible, Packer
• Provisioning virtual and cloud test labs (AWS/Azure/GCP, VMware/KVM) and wiring nightly automation to them
• Keeping cloud test environments consistent with the air-gapped production stack

Advantages

• Defense, aerospace, or other regulated environments; security clearance

• Vault, offline observability (Prometheus/Grafana/Loki/Elastic), GitOps in disconnected clusters

• Compliance frameworks (ISO 27001, NIST 800-53)

• NATS JetStream / Kafka operations: stream and consumer configuration, retention policies, disk sizing, replay.