Requisition ID: 1781 Standard Weekly Hours: 40.00 Location: ULA - Denver Relocation: Yes- Relocation may be available Travel Requirements: None/Infrequent At ULA, success comes through the efforts of a strong, united team. Thanks for your interest in United Launch Alliance, the world's most experienced and reliable space launch company! Successfully launching more than 155 consecutive missions with 100% mission success doesn't happen by accident. It's a testament to the commitment and dedication of our team of rocket scientists and support employees combined with the systems and processes we use to pull them together. As a ULA employee, you'll have the opportunity to grow in your career while working in a team-oriented culture that combines technology, innovation, ingenuity and a commitment to the extraordinary. Whether you are in college just launching your career, or, have experience and want to come work with the best rocket team in the world, our unshakable unity yields stronger solutions and better results as we carry out our mission to save lives, explore the universe, and connect the world. Our team is excited to meet you! <div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">Job Overview & Responsibilities</H2> </div><div> At ULA, our mission success depends on a secure, reliable, and high‑performing software development ecosystem. As a CI/CD Infrastructure Software Engineer specializing in AppSec and Operations, you will play a critical role in maintaining and advancing ULA’s core CI/CD toolchain, including GitLab, Artifactory, XRay, and SonarQube. In this role, you will support tool uptime, execute security scanning workflows, troubleshoot pipeline and runner issues, and ensure that ULA’s development environment meets rigorous audit, compliance, and reliability standards. You will partner across Software Engineering, Cybersecurity, and Cloud teams to strengthen secure coding practices and deliver stable, mission‑aligned development infrastructure that enables engineers to build with confidence. Core Technical Competencies: CI/CD Infrastructure & Tooling <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Experience supporting and operating on-prem and cloud based Continuous Integration / Continuous Deployment (CI/CD) platforms, including: <ul style="list-style-type:circle;margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">JFrog Artifactory lifecycle management and repository governance</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">JFrog XRay scanning management and policy enforcement</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">SonarQube configuration, ruleset updates, and remediation workflows</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">GitLab runners, permissions, and basic pipeline troubleshooting </li> </ul> </li> </ul> Application Security (AppSec) Foundations <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Understanding of secure coding concepts, static analysis, dependency scanning, Common Vulnerabilities and Exposures (CVE) identification, and application security remediation workflows.</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Ability to execute scanning routines, analyze findings, open remediation tasks, and support the secure coding dashboard & remediation cycle. </li> </ul> Cloud & Containerization Familiarity <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Basic hands‑on experience with Amazon Web Services (AWS) core services, especially those relevant to CI/CD and scanning pipelines (S3, IAM, EC2/EKS).</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Familiarity with Kubernetes concepts and supporting Kubernetes based workloads. </li> </ul> Infrastructure as Code & Automation <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Foundational experience with Infrastructure as Code (IaC) or automation tooling such as Terraform, Ansible, Bash/Python scripting.</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Ability to follow established IaC patterns to support CI/CD infrastructure updates, maintenance tasks, and access configurations.</li> </ul> Operational Responsibilities: Platform Operations <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Perform day‑to‑day operations for CI/CD tools (Artifactory/XRay/SonarQube/GitLab) including: <ul style="list-style-type:circle;margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">User access, permission updates, and audit support</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Backup/restore tasks</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Monitoring, alert response, and system health checks</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Package and artifact lifecycle management</li> </ul> </li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Support quarterly upgrade cycles, configuration fixes, and stability improvements.</li> </ul> Security Scanning & Remediation Support <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Execute routine security scans across tools and pipelines.</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Review, triage, and escalating CVE or policy violations.</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Assist SWE teams in interpreting scanner reports and preparing remediation tasks.</li> </ul> Pipeline Support <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Assist CI/CD engineers and developers with pipeline break/fix issues.</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Maintain reliable builds for Software Engineering Teams by supporting artifact availability, scanner health, and GitLab runner readiness.</li> </ul> Compliance & Documentation <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Participate in Cybersecurity Maturity Model Certification (CMMC) and National Institute of Standards and Technology (NIST) related remediation work through accurate documentation, required evidence capture, and execution of recurring security activities. </li> </ul> Collaboration & Communication Expectations <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Work closely with senior engineers, including members of Cloud, CI/CD Infrastructure, and CI/CD Pipelines, on shared engineering tasks.</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Provide timely support to Software Engineering Teams during migrations, scanning cycles, or code delivery events.</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Communicate clearly with cross‑functional teams.</li> </ul> Required Education Bachelor Required Years of Experience Minimum of 4 years of related work experience Basic Qualifications <ul> <li style="font-size:10.0pt">Bachelor's degree in a STEM (Science, Technology, Engineering, Mathematics) field from an accredited college or university</li> <li style="font-size:10.0pt">Four years of directly related exempt work experience may be used to satisfy the bachelor’s degree requirement</li> <li style="font-size:10.0pt">4+ years of experience in DevOps, Cloud Engineering, Application Security (AppSec), or Software Engineering</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Experience supporting production CI/CD systems or DevSecOps workflows</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Hands‑on experience with the following: GitLab, Artifactory, SonarQube, or security scanning tools</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Intermediate understanding of software build pipelines, package repositories, and code quality concepts</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Familiarity with AWS fundamentals and containerization concepts (Docker/Kubernetes)</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Ability to follow runbooks, execute operational tasks reliably, and document changes clearly</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Exposure to security frameworks or audit‑driven engineering tasks</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Mid-to-senior level experience with Terraform or another IaC tool</li> </ul> Preferred Qualifications <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li>Interest in automation, efficiency improvements, and evolving CI/CD and AppSec capability</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Any of the following certificates is a plus: <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">AWS Cloud Practitioner</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">AWS Solutions Architect (Associate level)</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">CKA – Certified Kubernetes Admin</li> </ul> </li> </ul></div></div></div>Summary Salary Range (for ULA - Denver only): $113,122.00 - $188,537.00 Please note that the salary information shown above is a general guideline only. Salaries are based upon a candidate's experience and qualifications, as well as internal equity, market and business considerations. Employees may be eligible for a discretionary annual bonus in addition to base pay. What makes ULA different? Because we understand launch success comes through the collective efforts of a team, we seek the best to join us. We value ethics, ingenuity, engagement and professional development for employees at all levels. We offer our employees competitive pay and benefits including: <ul> <li>401(k) match plus an additional employer contribution</li> <li>Discretionary annual incentive bonus for eligible employees</li> <li>Generous paid time off</li> <li>Flexible work environments</li> </ul> Additionally, most salaried ULA team members work a "9/80 schedule," meaning they enjoy every other Friday off. Benefits and work schedules may vary for union-represented hourly positions and are described in the applicable collective bargaining agreement. The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. Security Clearance / International Traffic In Arms Regulations (ITAR). This position requires use of information which is subject to the International Traffic In Arms Regulations (ITAR). Therefore, all applicants must be U.S. Persons as defined in ITAR 22 CFR 120.62 (e.g., U.S. Citizen, Lawful Permanent Resident (Green Card holder) or protected individual. See 8 U.S.C. 1101(a)(20) and 8 U.S.C. 1324b(a)(3) for additional information). ULA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment. ULA is a participant in the federal E-Verify Program. Posters in PDF format pertaining to this program can be accessed by clicking on the links identified below. E-Verify Participation poster (<a href="https://www.ulalaunch.com/docs/default-source/default-document-library/e-verify_poster_v08-08_standard_english.pdf">English</a> / <a href="https://www.ulalaunch.com/docs/default-source/default-document-library/everifyposterspanish1.pdf">Spanish</a>) and Right to Work Poster (<a href="https://www.ulalaunch.com/docs/default-source/default-document-library/oscrighttoworkposter-english.pdf">English</a> / <a href="https://www.ulalaunch.com/docs/default-source/default-document-library/righttoworkspanishposter.pdf">Spanish</a>). Colorado Equal Pay for Equal Work Act requires covered employees to follow a post selection notification process. A hired candidate may opt out of this process by notifying the hiring manager in writing at the time the offer is accepted

CI/CD Infrastructure Software Engineer 3 (Centennial, CO, US, 80112) @ United Launch Alliance

About this role

Ready to apply?