Senior DevSecOps / Platform Engineer - Clearance Required

Responsibilities

• CI/CD & Pipeline Engineering: Architect, build, and maintain robust GitLab Pipelines for seamless application deployment.
• Migration Support: Play a key role in assisting the Platform team with the migration of legacy repositories and workflows from BitBucket to GitLab.
• Infrastructure Provisioning: Design, deploy, and manage the infrastructure behind our apps—across AWS GovCloud, edge, and Navy networks using Terraform, Ansible, and GitLab.
• Containerization & Orchestration: Drive containerization efforts for mission-critical applications (NADACS, SPECTR, etc.) and manage Kubernetes.
• Risk & Recovery: Develop and maintain Helm Charts for deployments and ensure cluster resilience through automated Kubernetes backups and recovery testing (e.g., Velero).
• Security & Compliance Automation: Engineer automated processes for RHEL image hardening and execute automated STIG checklists.
• ATO Integration: Integrate continuous, automated security scanning directly into pipelines to maintain Authority to Operate (ATO) status and support ICAM integration.
• Platform Operations: Establish comprehensive continuous monitoring, alerting, and reporting mechanisms (e.g., Prometheus/Grafana) across the platform.
• Secrets Management: Oversee cryptographic lifecycles through rigorous secrets management and automated key rotations.

Qualifications

• Clearance & Certification: Active Secret clearance or higher (required) and meet DoD 8570/8140 baseline certifications (e.g., CompTIA Security+ CE).
• Experience Level: 5+ years of experience (Mid-to-senior level) functioning as a DevSecOps or Platform Engineer, specifically within DoD, federal, or highly regulated environments.
• Cloud Expertise: Significant experience deploying and managing cloud infrastructure using AWS GovCloud and hybrid cloud environments.
• Orchestration: Hands-on Kubernetes administration and custom Helm chart development (CKAD or CKA preferred).
• Operating Systems: Strong background in RHEL system administration and scripting automated system/container hardening.
• Tools: Advanced proficiency building pipelines natively in GitLab, with experience handling migrations from BitBucket.
• Core Competencies: An automation-centric approach to eliminate manual toil and a security-first mindset that treats security as a foundational element.
• Technical Breadth: Knowledge of secure identity and access management (ICAM) protocols (SAML, OAuth2, OIDC) and proficiency in at least one language (e.g., Python).
• Bonus Points For: Master’s degree in Computer Science or a related field. Prior experience with U.S. Navy programs or command and control platforms. Experience securing or operating IL5+ environments. AWS Certification (Solutions Architect or Developer Associate).