DevOps Engineer

This is an in-person position in Chapel Hill, NC.Apply: https://www.flow3d.com/devops-engineer/The RoleFlow Science is looking for a DevOps Engineer who can take ownership of the build, release, and security infrastructure for our diverse product suite to architect our CI/CD pipeline evolution, extending our current GitLab-based system from continuous integration into full continuous delivery complete with automated superbuilds, installer creation, and comprehensive testing reports for customer delivery. If you believe infrastructure should be elegant, builds should be reproducible, and security should be proactive rather than reactive, we want to talk to you.This is a solo role with significant autonomy and impact. You’ll work with seven distinct products spanning FORTRAN CFD solvers, C++/Qt graphical interfaces, C applications, and supporting libraries. You will be the expert who transforms our build system from good to exceptional, while ensuring security is baked into every step.What you'll doBuild Pipeline Evolution: Extend our GitLab CI system to support fully automated continuous delivery workflows, including orchestrated superbuilds across our multi-product ecosystem and automated installer generation for Windows and multiple Linux distributions.Security Infrastructure: Own and evolve our SAST, SCA, and SBOM tooling as living systems that provide actionable insights to development teams and guide the organization on secure software supply chain practices and vulnerability management.Artifact & Release Management: Implement robust artifact management solutions to handle compiled binaries, installers, container images, and dependencies across our product portfolio. Manage third-party package builds and updates, ensuring our external dependencies stay current and secure across all supported platforms.Infrastructure Optimization: Evaluate and implement build infrastructure to improve parallelization and resource utilization while balancing sophistication with maintainability.Testing & Reporting: Create automated testing frameworks and generate quality and security posture reports suitable for external customer consumption.What you should knowMulti-language Build Systems: You understand the nuances of building FORTRAN/C++ projects with complex dependencies, Qt applications, .NET solutions, and are fluent in CMake. You know how to orchestrate builds across different ecosystems and have managed third-party dependencies, including building them from source, to ensure security and compatibility across your supported platforms.GitLab CI/CD & Containerization: You’re fluent in GitLab pipeline design and Docker, and you understand when Kubernetes adds value versus complexity. You’ve made these architectural decisions before and can explain the tradeoffs clearly.Application Security Tooling: You’ve configured and maintained SAST/SCA tools, understand how to tune them to reduce false positives, and can translate security findings into actionable guidance for developers. You know what an SBOM is and why it matters.Package & Dependency Management: You’ve built and maintained third-party C++ and FORTRAN dependencies from source, managed version compatibility across a complex software stack, and understand how to create reproducible builds. Whether it’s ensuring Qt, MPI, or numerical libraries build consistently across Windows and multiple Linux distributions, you know that dependency management is where build systems succeed or fail.Release Engineering: You’ve created automated installers and managed software distribution and understand that scientific and engineering desktop applications have different requirements than web services.Infrastructure as Code: You approach infrastructure problems programmatically. Whether managing GitLab runners, container registries, or artifact repositories, you believe configuration should be versioned and reproducible.Scientific Computing Context: While we don’t expect you to understand computational fluid dynamics, you appreciate that HPC and engineering software has unique requirements around compiler toolchains, numerical libraries, and cross-platform compatibility.