Quantum Integrators · 7 hours ago
DevOps / Release Engineer — Secure Package Deployment & CI/CD
Quantum Integrators is seeking a DevOps/Release Engineer to design and deliver a CI/CD pipeline that deploys approved packages securely. The role involves building and operating a secure package deployment pipeline while collaborating with security, compliance, and operations teams to implement necessary checks and policies.
Responsibilities
Design, implement, and operate CI/CD pipelines that deliver packages from internal artifact stores to target hosts without requiring elevated privileges on the target
Enforce allowlist/whitelist policies for package identities (artifact IDs, versions, checksums, signatures)
Prevent direct internet downloads on target hosts by using controlled artifact retrieval (CI/CD agent pull, internal proxy, or approved artifact relay)
Implement integrity and provenance checks (sha256 checksums, GPG signatures, binary provenance) as gate criteria in pipelines
Ensure secure secrets handling (Jenkins credentials, Vault) and strict RBAC for pipeline operations and artifact retrieval
Build idempotent, retryable deployment automation (Ansible/other) that performs user-space installs or uses privileged agents only within controlled boundaries
Provide robust logging, audit trails, and monitoring for deployments and policy enforcement; integrate with SIEM/ITSM as required
Create runbooks, rollback procedures, and onboarding docs for new applications and teams
Work with compliance and change-control processes to maintain required approvals and traceability
Qualification
Required
5+ years hands-on experience in DevOps, Release Engineering, or SRE roles
Strong Linux administration and packaging knowledge (rpm/deb, package formats) and experience implementing non-root/user-space installation approaches
Proven experience designing and operating CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions, or Azure DevOps)
Experience with configuration management and automation (Ansible preferred, or similar)
Hands-on experience with artifact repositories and controlled distribution (Artifactory, Nexus, internal repos)
Familiarity with integrity verification (checksums, GPG signatures) and provenance concepts
Experience with secrets management (HashiCorp Vault, cloud KMS) and secret injection in pipelines
Strong understanding of networking constraints and how to prevent direct internet access from target hosts (proxies, deny-lists, egress controls)
Demonstrated ability to work with security/compliance teams and follow change-control processes
Preferred
Experience implementing allowlist/denylist enforcement mechanisms for artifacts in pipelines
Experience with privileged-separation patterns (deployment agents, ephemeral privileged services, or operator-approved installs)
Background in large-scale deployments, multi-tenant pipelines, or regulated environments
Containerization experience (Docker), and experience using containers to isolate installs when appropriate
Experience integrating deployment telemetry with logging and monitoring stacks (ELK, Prometheus, Splunk)
Company
Quantum Integrators
Quantum Integrators | 20 Years of Enterprise Innovation For over two decades, Quantum Integrators has been empowering organizations with cutting-edge technology solutions that drive growth, resilience, and operational excellence.
H1B Sponsorship
Quantum Integrators has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (46)
2024 (71)
2023 (66)
2022 (30)
2021 (43)
2020 (67)
Funding
Current Stage
Late StageCompany data provided by crunchbase