Senior DevSecOps, Platform Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, construct, and sustain robust GitLab Pipelines to ensure smooth application deployment.

• Play an instrumental role in aiding the Platform team with the transition of legacy repositories and workflows from BitBucket to GitLab.

• Architect, deploy, and oversee the infrastructure supporting our applications across AWS GovCloud, edge, and Navy networks utilizing Terraform, Ansible, and GitLab.

• Propel containerization initiatives for mission-critical applications (NADACS, SPECTR, etc.) and manage Kubernetes effectively.

• Create and maintain Helm Charts for deployments while ensuring cluster resilience through automated Kubernetes backups and recovery testing (e.g., Velero).

• Develop automated processes for RHEL image hardening and implement automated STIG checklists.

• Incorporate continuous, automated security scanning directly into pipelines to uphold Authority to Operate (ATO) status and facilitate ICAM integration.

• Establish thorough continuous monitoring, alerting, and reporting systems (e.g., Prometheus/Grafana) throughout the platform.

• Manage cryptographic lifecycles through meticulous secrets management and automated key rotations.

⛳️ Requirements

• Active Secret clearance or higher (mandatory) and compliance with DoD 8570/8140 baseline certifications (e.g., CompTIA Security+ CE).

• Over 5 years of experience (Mid-to-senior level) as a DevSecOps or Platform Engineer, particularly within DoD, federal, or highly regulated settings.

• Extensive experience in deploying and overseeing cloud infrastructure using AWS GovCloud and hybrid cloud environments.

• Practical experience in Kubernetes administration and custom Helm chart development (CKAD or CKA preferred).

• Strong expertise in RHEL system administration and automated system/container hardening through scripting.

• Advanced skills in building pipelines natively in GitLab, along with experience managing migrations from BitBucket.

• A focus on automation to minimize manual work and a security-first approach that considers security as a crucial component.

• Familiarity with secure identity and access management (ICAM) protocols (SAML, OAuth2, OIDC) and proficiency in at least one programming language (e.g., Python).

🏝️ Benefits

• Comprehensive health, dental, and vision insurance packages.

• 401(k) plan with competitive matching contributions.

• Opportunities for professional development and continuous learning.

• Flexible work schedules and remote work options.

• Generous paid time off and holiday policies.