Data Site Reliability Engineer (SRE)

About the role

The Data Site Reliability Engineer (SRE) will work as part of the CMM Data Modernization and Governance team responsible for delivering integrated data governance, engineering, data platform, reporting, analytics, and Artificial Intelligence (AI)/Machine Learning (ML) capabilities that support operational decision-making and fulfill the AO's data and analytics objectives in support of the CMM program.

Responsibilities

• Provide comprehensive real-time monitoring, incident and event management, capacity planning, and operational reporting to support application deployments, maintain system health, predict demand, and align cloud operations with evolving business and security objectives.
• Maintain and audit user roles and responsibilities in cloud environments.
• Integrate Single Sign On (SSO), Multi-Factor Authentication (MFA) and group identity management managed through the Judiciary Enterprise Network Information Exchange (JENIE) for enforcing least privilege access.
• Adhere to guidelines prescribed by the Government and continuously assess and improve credential management processes for all user credentials.
• Provide Disaster Recovery (DR) and Continuity of Operations (COOP) options. This must include high-availability options, including fault-tolerant and automated failover designs.
• Integrate DevSecOps tools and processes seamlessly with enterprise systems (Integrated Development Environments (IDEs), ticketing, monitoring, etc.) to avoid fragmentation and ensure unified security posture.
• Provide and manage a centralized secrets management system with automated rotation, access logging, and policy enforcement to securely store, manage, and control access to sensitive information and to prevent unauthorized access and data breaches for any administrative user account.
• Implement unified, automated, continuous monitoring (24/7/365) systems and tools for security, performance, and compliance across all environments, leveraging dashboards and alerting for real-time visibility.
• Provide supplemental monitoring of event response activities beyond normal business hours (7a.m – 6p.m Eastern Time).
• Ensure automated generation and management of Software Bill of Materials (SBOM) for all deployed artifacts, supporting transparency and compliance.
• Provide diagnostics, metrics’ gathering, and performance tuning services.
• Provide canary release function for end-user testing to support beta testing.
• Implement and operate a comprehensive incident and event management process, including integration with enterprise SIEM solutions, automated alerting, escalation workflows, and root cause analysis for all critical incidents.
• Provide engineering support to ensure prompt detection, logging, diagnosis, escalation, and resolution of incidents to restore normal service operations as quickly as possible and minimize impact.
• Make recommendations for the improvement of Incident and Problem management consistent with industry’s best practices for the cloud.
• Maintain knowledge base of known issues, resolutions, and best practices for operational continuity.
• Perform automated health checks across the full stack (Operating System, Application, Database and PaaS services) at agreed levels on an agreed frequency.
• Develop and implement thresholds, rules, and response procedures based on product team’s recommendation.
• Monitor resource utilization (e.g., CPU, Memory, Disk Space) for the cloud hosted Virtual Machines (VMs) and other cloud services.
• Manage the resolution procedures for any threshold breaches for cloud resources.
• Improves system reliability, observability, automation, scalability, and operational resilience through engineering practices.
• Maintains knowledge of known issues, resolutions, and best practices for operational continuity.
• Monitors, maintains, and optimizes cloud infrastructure, databases, and platform services for reliability and performance.
• Acts as FinOps Analyst and performs cost optimization.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, or related field. (Or equivalent experience.)
• 5+ years’ experience in IT systems engineering, systems development, systems coding, and programming.
• Deep expertise with AWS services, including monitoring, logging, compute, storage, and networking.
• Hands-on experience with monitoring and APM tools such as CloudWatch, Azure Monitor, Datadog, Prometheus, Grafana, New Relic, etc.
• Solid understanding of incident response, change management, and ITIL-based operational support.
• Familiarity with CI/CD toolchains and automation platforms (Jenkins, GitHub Actions, GitLab, ArgoCD).
• Strong scripting skills (Python, PowerShell, Bash) for automation and orchestration.
• Advanced experience in providing DevSecOps implementation using GitOps, or similar tools.
• Expert knowledge of source version control, build/release tools and methodologies, CI/CD pipelines and the Software Build process.
• Experience in building and maintaining CI/CD pipelines for large enterprises that consist of a large number of complex applications.
• Ability to be flexible and work on several different products while supporting multiple teams.
• Experienced in developing, testing, and maintaining containerized applications.
• Experience with FinOps practices, cost modeling, forecasting, and optimization tools within cloud platforms.
• Understanding of federal compliance and security frameworks (e.g., FedRAMP, NIST, JISF Rev 5).
• Experience working across multiple product teams to get a grasp of a product and/or programs overall state of health.
• ITIL, AWS SysOps, or Google Professional Cloud DevOps Engineer certifications are a plus.