Senior DevSecOps Engineer IRES - SSFB/HSV/FBEL
Amentum · Arlington, VA · 1 mo ago
On-siteEngineeringFull-time
Location: Schriever Space Force Base, Colorado Springs, CO; Redstone Arsenal, Huntsville, AL; or Fort Belvoir, VA. Relocation Assistance: None available. Remote/Telework: Not available. Clearance: DoW Secret. Shift: Day shift. Travel Required: Up to 10% of the time.
Responsibilities
- Design, implement, and maintain scalable cloud and container platform solutions supporting NGE mission applications across environments including Azure Kubernetes Service (AKS), AWS Elastic Container Service (ECS), and Red Hat OpenShift Container Platform (OCP).
- Engineer, enhance, and sustain CI/CD pipelines that integrate automated build, test, security scanning, release, and deployment workflows to accelerate software delivery while maintaining compliance and operational stability.
- Develop and maintain automated infrastructure provisioning and configuration management solutions using tools such as Terraform, Helm, Ansible, and Bash, enabling repeatable, version-controlled deployments across development, test, and production environments.
- Implement container hardening, image assurance, secrets management, and runtime security controls aligned to DoD, MDA, RMF, DISA STIG, and Zero Trust requirements; support continuous monitoring and compliance validation for containerized workloads and platform services.
- Assess existing application and infrastructure architectures and develop migration and integration strategies for cloud-enabled and containerized environments; ensure interoperability between legacy services, cloud-native platforms, and enterprise mission systems.
- Support the design and evolution of resilient platform services that host modern applications and shared capabilities across IaaS and PaaS ecosystems, including orchestration, service networking, observability, policy enforcement, and secure access patterns.
- Partner with software developers, systems engineers, network engineers, cybersecurity teams, database administrators, and Government stakeholders to ensure cohesive integration of infrastructure, applications, and security controls across the NGE ecosystem.
- Monitor, troubleshoot, and resolve complex platform, integration, and deployment issues across Kubernetes and cloud-hosted environments; improve operational resilience through automation, root cause analysis, and proactive engineering improvements.
- Support deployment and sustainment of cloud-hosted and containerized application data services, including technologies such as PostgreSQL, Cassandra, and MySQL, ensuring secure configuration, availability, and performance alignment with mission requirements.
- Develop and maintain technical documentation including implementation plans, pipeline designs, architecture diagrams, deployment procedures, standard operating procedures, and configuration baselines to support lifecycle management and operational continuity.
- Evaluate emerging DevSecOps, platform engineering, and cloud technologies to improve automation, scalability, security, cost efficiency, and mission responsiveness across the NGE environment.
- Provide technical status, risk identification, engineering recommendations, and platform capability assessments to program leadership and Government stakeholders; translate complex platform and automation topics into mission-relevant impacts and decisions.
Requirements
- Must have 12, or more, years of general (full-time) work experience; may be reduced with completion of advanced education.
- Must have 6, or more, years of directly related progressive experience in DevSecOps, platform engineering, systems integration, cloud engineering, or related infrastructure engineering roles.
- Must have 1, or more, years of experience working in a management or leadership role.
- Must have demonstrated experience designing, deploying, and sustaining Kubernetes-based or other containerized platforms in enterprise environments.
- Must have demonstrated experience with one or more cloud platforms such as AWS, Azure, or Red Hat OpenShift.
- Must have experience building and maintaining CI/CD pipelines, automation workflows, and secure software delivery processes.
- Must have experience with Infrastructure-as-Code and configuration automation tools such as Terraform, Helm, Ansible, and scripting languages such as Bash.
- Must have a strong understanding