Senior/Staff DevOps Engineer

This is a fully remote position, open to applicants in Virginia, +1 more state.

📋 Description

• Develop and manage RCF/RCP partner environments across AWS, Azure, GCP, and customer-controlled or on-premises infrastructures.

• Package and verify Trase OS services and their dependencies utilizing Docker, Kubernetes, Helm, and authorized registries.

• Maintain versioned inventories of images, release manifests, and image digests for partner deliveries.

• Create reusable infrastructure-as-code modules, automate cluster bootstrapping, and establish CI/CD or GitOps workflows.

• Prepare and confirm networking, IAM, secrets, certificates, storage, registries, and model-provider connectivity.

• Assist with restricted-network and disconnected deployment patterns.

• Validate comprehensive agent workflows, including service integrations, authentication, model access, and persistent state.

• Manage technical triage and troubleshooting for partner deployment and production challenges across application services, Kubernetes, cloud infrastructure, and networks.

• Deliver validated releases, patches, and upgrades with validation gates, compatibility checks, smoke tests, rollback procedures, and release notes.

• Oversee metrics, logs, traces, audit logging, dashboards, alerts, and SLOs for partner environments.

• Aid in incident response, recovery, capacity planning, and reliability enhancements.

• Collaborate with GRC and RCF security teams on container hardening, vulnerability scanning, CVE remediation, SBOMs, and engineering evidence for STIG, RMF/ATO, and impact-level requirements.

• Support the maintenance of federal deployments through patching, image updates, configuration modifications, and ongoing security remediation.

• Keep deployment guides, environment inventories, operational runbooks, and troubleshooting documentation up to date.

• Facilitate partner onboarding, knowledge transfer, and operational transitions.

• Lead infrastructure and reliability decisions across RCF/RCP projects.

• Establish standards for secure releases, production readiness, observability, and support transitions.

• Collaborate with TPM, Product, GRC, and partner teams to clarify requirements, validate acceptance criteria, estimate work, and identify risks and dependencies.

• Transform recurring partner deployment and support requirements into reusable automation and platform enhancements.

• Mentor engineers and partner teams while documenting technical decisions.

⛳️ Requirements

• U.S. citizenship is required.

• A minimum of 10 years of experience in software, platform, infrastructure, SRE, or DevOps engineering, including hands-on management of production systems.

• Extensive hands-on experience with Linux, Docker, Kubernetes, and operations of production clusters.

• Strong experience with Helm and infrastructure as code tools like Terraform or Pulumi, including reusable modules, state management, testing, and change review.

• Practical infrastructure experience with at least two of AWS, Azure, and GCP, covering compute, networking, storage, identity, and managed services.

• Experience in deploying and managing software in customer-controlled, private-cloud, hybrid-cloud, or on-premises settings, including adapting cloud-native products for these deployment strategies.

• Profound understanding of networking, DNS, ingress, load balancing, certificates, IAM, secrets management, persistent storage, and service-to-service security.

• Experience in operating CI/CD or GitOps systems for releases, upgrades, and rollbacks, alongside observability and incident response for production services.

• Strong software engineering and automation skills in Python, Go, TypeScript, or a similar language, capable of working across application and infrastructure layers.

• Experience in hardening production infrastructure and container images, investigating vulnerability findings, and delivering validated security fixes in collaboration with security teams.

• Excellent partner-facing communication and troubleshooting capabilities, with ownership of technical issues from initial report through validated resolution and operational handoff.

• Demonstrated experience utilizing AI-assisted coding and engineering tools to accelerate development, infrastructure automation, troubleshooting, operational analysis, or incident investigation.

• Previous SRE, DevOps, or infrastructure engineering experience supporting national security, defense, federal agencies, or other government programs is highly preferred.

• An active U.S. government security clearance is strongly preferred.

• Experience in operating within restricted-network, disconnected, regulated, or security-sensitive environments is strongly preferred.

• Hands-on familiarity with STIG hardening, NIST controls, FedRAMP, RMF/ATO evidence, or DoD IL4/IL5/IL6 deployment requirements is strongly preferred.

• Experience with government cloud infrastructure, including AWS GovCloud, and federal deployment platforms such as Second Front/Game Warden is strongly preferred.

• Experience with software supply-chain security, SBOMs, artifact signing, FIPS-enabled components, Harbor, or policy as code is strongly preferred.

• Experience supporting long-running, stateful, data-intensive, AI/ML, or GPU-enabled workloads is strongly preferred.

• Experience in customer-facing roles, partner engineering, or forward-deployed tasks supporting multiple organizations and transferring operational knowledge is strongly preferred.

🏝️ Benefits

• Bonus

• Equity incentives

• Career track opportunity with potential for rapid advancement based on strong performance as the firm grows

• 100% employer-paid, comprehensive health care including medical, dental, and vision for you and your family.

• Paid maternity and paternity leave for 14 weeks at employees' normal pay.

• Unlimited PTO, subject to management approval.

• Opportunities for professional development and continued learning.

• Optional 401K, FSA, and equity incentives available.

• Mental health benefits provided through Tara Mind.

• Cost-effective GLP-1 solutions available through Crux.

• Up to 20% travel may be required.