Lead DevOps Engineer (Remote - US)

About the role

ICF is seeking a Lead DevOps Engineer to own and evolve cloud platforms that support modern enterprise applications. The role will operate multi-account AWS environments, strengthen infrastructure automation and GitOps delivery, and partner with application, security, database, and enterprise cloud teams to provide secure, observable, and recoverable services.

Job Location: This position requires that the job be performed in the United States. If you accept this position, you should note that ICF monitors employee work locations, blocks access from foreign locations and foreign IP addresses and prohibits personal VPN connections.

Responsibilities

• Own the architecture and day-to-day operation of multi-account AWS environments across development, QA, staging, and production, including VPC, IAM, EKS, Elastic Load Balancing, CloudFront, Route 53, ACM, S3, and ECR.
• Develop and maintain reusable Terraform modules and Terragrunt environment configurations, including remote state, stack dependencies, drift detection, change planning, approvals, imports, and recovery procedures.
• Administer Amazon EKS Auto Mode and Kubernetes resources using Helm, Argo CD, and ApplicationSets; manage upgrades, access, capacity, ingress, secrets, and workload reliability.
• Support GitOps controllers and Kubernetes infrastructure automation, including AWS Controllers for Kubernetes and Kubernetes Resource Orchestrator, and resolve reconciliation, ownership, and lifecycle failures.
• Build and maintain GitHub Actions workflows, AWS OIDC authentication, self-hosted runners, container-image pipelines, environment promotion, deployment approvals, and rollback procedures.
• Operate Microsoft SQL Server on Amazon RDS, including parameter and option groups, backups, snapshots, point-in-time recovery, restore testing, Performance Insights, CloudWatch monitoring, and AWS DMS migration workflows.
• Implement security and audit controls using IAM, KMS, Secrets Manager, AWS Config, CloudTrail, GuardDuty, Security Hub, Inspector, WAF, security groups, and centralized logging.
• Build and maintain observability using Prometheus, Grafana, Amazon CloudWatch, OpenTelemetry and AWS Distro for OpenTelemetry, with actionable dashboards, metrics, logs, traces, alerts, and service-level objectives.
• Partner with developers to review and troubleshoot Java and Spring Boot services, including application startup