Requisition ID: 1782 Standard Weekly Hours: 40.00 Location: ULA - Denver Relocation: Yes- Relocation may be available Travel Requirements: None/Infrequent At ULA, success comes through the efforts of a strong, united team. Thanks for your interest in United Launch Alliance, the world's most experienced and reliable space launch company! Successfully launching more than 155 consecutive missions with 100% mission success doesn't happen by accident. It's a testament to the commitment and dedication of our team of rocket scientists and support employees combined with the systems and processes we use to pull them together. As a ULA employee, you'll have the opportunity to grow in your career while working in a team-oriented culture that combines technology, innovation, ingenuity and a commitment to the extraordinary. Whether you are in college just launching your career, or, have experience and want to come work with the best rocket team in the world, our unshakable unity yields stronger solutions and better results as we carry out our mission to save lives, explore the universe, and connect the world. Our team is excited to meet you! <div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">Job Overview & Responsibilities</H2> </div><div> ULA is evolving its software delivery capabilities, and we are seeking a CI/CD Pipelines Software Engineer to design, modernize, and enhance the automated pipelines that power our mission‑critical software. In this DevSecOps‑focused role, you will build and optimize GitLab‑based pipelines, integrate security scanning and policy enforcement, and contribute to cloud‑enabled development workflows across AWS and container platforms. You will collaborate with engineering teams to increase pipeline resiliency, reduce manual toil, and support major transformation initiatives such as GitLab migration and cloud development environment adoption. Your work directly improves delivery speed, software quality, and the secure‑by‑design posture essential to ULA’s launch operations. Core Technical Competencies: CI/CD Pipeline Engineering <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Ability to design, implement, and enhance Continuous Integration / Continuous Deployment (CI/CD) pipelines for Software Engineering Teams aligned with major initiatives such as: <ul style="list-style-type:circle;margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Cloud Development Environments</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">GitLab migration and prod readiness</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Pipeline scalability and sustainability improvements</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Artifactory structure improvements & Terraform repo restructuring </li> </ul> </li> </ul> DevSecOps & Application Security Development <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Hands‑on experience integrating security scanning into pipelines:</li> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="circle"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">JFrog Artifactory / XRay, SonarQube, container scanning, dependency scanning</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Implementation of secure coding dashboards, quality profiles, and Policy‑as‑Code (PaC) controls</li> </ul> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Ability to implement automated policy enforcement, remediation workflows, and pipeline gating based on security posture.</li> </ul> Automation & Code Development <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Strong scripting and automation abilities (Python, Bash, PowerShell).</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Ability to break down Terraform or pipeline Infrastructure as Code (IaC) into modular, maintainable components.</li> </ul> Cloud‑Integrated CI/CD <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Familiarity with Amazon Web Services (AWS) based build/deploy processes and GitLab runners deployed in cloud or hybrid infrastructure.</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Awareness of Cybersecurity Maturity Model Certification (CMMC) aligned DevSecOps guardrails and pipeline hardening requirements.</li> </ul> Responsibilities: Pipeline Development & Enhancement <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Develop, optimize, and maintain GitLab pipelines supporting cloud and on‑prem builds using Bamboo/Bitbucket.</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Build isolated or specialized pipelines when required by mission or security needs. </li> </ul> Cloud Based Development and Container Scanning Pipelines Modernization <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Contribute to Cloud Developer Environment Proof of Concept (PoC), test deployment, pilot readiness, and pipeline conversions.</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Support heritage Container Scanning Pipelines sustainment and modernization.</li> </ul> Secure Coding & Application Security Development <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Deploy and maintain SonarQube quality profiles, secure coding dashboards, and scanning enhancements.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Embed secure coding standards from the ULA Secure Coding Framework into CI/CD workflows. </li> </ul> DevSecOps Operations & Compliance <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Support compliance initiatives such as CMMC‑related assessments, vulnerability remediation, and pipeline audit readiness.</li> </ul> Cross‑Team Collaboration Work with teams to ensure aligned pipeline standards, security posture, and reliable software delivery. Required Education Bachelor Required Years of Experience Minimum of 4 years of related work experience Basic Qualifications <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Bachelor's degree in a STEM (Science, Technology, Engineering, Mathematics) field from an accredited college or university </li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">4+ year's experience in CI/CD, DevOps, software development, or security engineering</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Experience operating and developing GitLab based pipelines</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Hands‑on experience with security scanning tools (JFrog, xRay, Trivy, etc.) and integrating them into CI/CD workflows</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Proficiency with Python, Bash, or Shell scripting</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Mid-to-senior level knowledge of IaC and AWS fundamentals</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Ability to troubleshoot pipeline issues, identify root causes, and develop corrective actions</li> </ul> Preferred Qualifications <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Experience with cloud‑based development environment tools</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Any of the following certificates is a plus: <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">AWS Cloud Practitioner</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">AWS Solutions Architect (Associate level)</li> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">CKA – Certified Kubernetes Admin</li> </ul> </li> </ul></div></div></div>Summary Salary Range (for ULA - Denver only): $113,122.00 - $188,537.00 Please note that the salary information shown above is a general guideline only. Salaries are based upon a candidate's experience and qualifications, as well as internal equity, market and business considerations. Employees may be eligible for a discretionary annual bonus in addition to base pay. What makes ULA different? Because we understand launch success comes through the collective efforts of a team, we seek the best to join us. We value ethics, ingenuity, engagement and professional development for employees at all levels. We offer our employees competitive pay and benefits including: <ul> <li>401(k) match plus an additional employer contribution</li> <li>Discretionary annual incentive bonus for eligible employees</li> <li>Generous paid time off</li> <li>Flexible work environments</li> </ul> Additionally, most salaried ULA team members work a "9/80 schedule," meaning they enjoy every other Friday off. Benefits and work schedules may vary for union-represented hourly positions and are described in the applicable collective bargaining agreement. The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. Security Clearance / International Traffic In Arms Regulations (ITAR). This position requires use of information which is subject to the International Traffic In Arms Regulations (ITAR). Therefore, all applicants must be U.S. Persons as defined in ITAR 22 CFR 120.62 (e.g., U.S. Citizen, Lawful Permanent Resident (Green Card holder) or protected individual. See 8 U.S.C. 1101(a)(20) and 8 U.S.C. 1324b(a)(3) for additional information). ULA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment. ULA is a participant in the federal E-Verify Program. Posters in PDF format pertaining to this program can be accessed by clicking on the links identified below. E-Verify Participation poster (<a href="https://www.ulalaunch.com/docs/default-source/default-document-library/e-verify_poster_v08-08_standard_english.pdf">English</a> / <a href="https://www.ulalaunch.com/docs/default-source/default-document-library/everifyposterspanish1.pdf">Spanish</a>) and Right to Work Poster (<a href="https://www.ulalaunch.com/docs/default-source/default-document-library/oscrighttoworkposter-english.pdf">English</a> / <a href="https://www.ulalaunch.com/docs/default-source/default-document-library/righttoworkspanishposter.pdf">Spanish</a>). Colorado Equal Pay for Equal Work Act requires covered employees to follow a post selection notification process. A hired candidate may opt out of this process by notifying the hiring manager in writing at the time the offer is accepted

CI/CD Pipelines Software Engineer 3 (Centennial, CO, US, 80112) @ United Launch Alliance

About this role

Ready to apply?