Platform Engineer (Mid)
The Amatriot Group · Beavercreek, OH · 1 wk ago
On-siteInformation Technology$160k–$200k/yrFull-time
Key Responsibilities
- Implement and maintain automated and secure DevSecOps pipelines with integrated security controls throughout the software delivery lifecycle
- Aid developers in building, scanning, and testing systems through automated pipeline integration and CI/CD processes
- Develop DevSecOps tools and techniques to support comprehensive automated deployment workflows
- Follow and implement best practices for DevSecOps actions and ensure adherence to established standards
- Support continuous integration and continuous deployment (CI/CD) processes with integrated security controls
- Automate deployment and maintenance of solutions across multiple Azure cloud instances using Terraform, ARM/Bicep, and other IaC tooling based on guidance from senior engineers and architects
- Implement infrastructure consistency and repeatability through automated processes
- Collaborate with Cloud Ops/VDI Team to optimize cloud resource utilization, performance, and cost management through automated solutions
- Ensure infrastructure deployments comply with security requirements and organizational standards through automated validation
- Support development and automation of system failover, high availability, and application deployment/upgrade availability models
- Incorporate security controls and automated security scans to conform to Risk Management Framework (RMF) security requirements
- Work as part of an Agile development team to ensure that the organization's data, network, and IT infrastructure are safe and free from security threats
- Integrate automated security scanning, vulnerability assessment, and compliance checking throughout deployment pipelines
- Collaborate with Cyber/ATO team on security control implementation and continuous compliance monitoring
- Maintain familiarity with RMF/DIACAP accreditation processes and ensure pipeline compliance
- Support cybersecurity documentation completion in accordance with DoD and USAF policy
- Integrate security compliance into automated infrastructure provisioning and management
- Implement containerization strategies using Docker and Azure Kubernetes Services with integrated security controls
- Support container security scanning, image vulnerability management, and secure container lifecycle processes
- Configure and maintain container orchestration for security, scalability, and performance
- Implement container security best practices and automated vulnerability remediation
- Support development teams with secure containerization guidance and troubleshooting
- Maintain cybersecurity performance and functions across infrastructure components
- Work with senior platform engineers to understand technical requirements and implement effective solutions
Qualifications
- Education: Bachelor's degree in Computer Science, Information Technology, Engineering, or related technical field
- Experience: Minimum 3 years of professional experience in DevOps, platform engineering, or infrastructure automation
- Cloud Platforms: Hands-on experience with Azure cloud services and architecture; AWS experience is a plus
- Infrastructure as Code: Working proficiency with Terraform, ARM templates, Bicep, or similar IaC tools
- CI/CD Pipelines: Experience implementing and maintaining automated CI/CD pipelines with security controls
- Containerization: Practical experience with Docker and container orchestration platforms; Azure Kubernetes Services (AKS) exposure preferred
- Security & Compliance: Understanding of DevSecOps practices, RMF/DIACAP processes, and DoD/USAF security requirements
- Automation: Experience automating infrastructure deployment, configuration management, and operational processes
- Scripting: Proficiency in scripting languages (PowerShell, Python, Bash) for automation tasks
- Version Control: Strong Git experience with understanding of branching strategies and workflows
- Monitoring & Observability: Experience with Azure Monitor, Log Analytics, or similar monitoring platforms
- Container Security: Knowledge of container security practices and vulnerability management
- Agile Methodologies: Experience working in Agile development environments and collaborating with cross-functional teams
- Problem-Solving: Ability to troubleshoot infrastructure and platform issues effectively