Overview: Expression is seeking a mid-level DevOps Engineer to support the National Telecommunications and Information Administration (NTIA) Federal Spectrum Data Systems (FSDS) program within the U.S. Department of Commerce.
The FSDS program supports the modernization of federal spectrum management systems through improved technology, automation, data integration, and interoperability. These systems help NTIA manage federal spectrum use and support essential government missions.
In this role, you will implement and maintain secure Azure cloud infrastructure and CI/CD pipelines supporting applications, data services, and analytics. You will work with senior engineers, software developers, system administrators, and security personnel to support deployments across Azure Commercial, Government, and Secret cloud environments.
We're looking for someone who can take ownership of defined tasks, troubleshoot deployment issues, and turn repeatable work into reliable automation. You should bring practical DevOps experience, know when to ask questions, and be ready to build your skills in a secure federal environment.
Location: Washington, DC (3 days/week on-site).
Cloud Infrastructure & Automation- Deploy, configure, and maintain Azure resources supporting unclassified and classified spectrum management systems.
- Create and update Infrastructure as Code using established patterns and tools such as Terraform, Bicep, or ARM templates.
- Build and maintain Docker images and support container deployments using Kubernetes and Helm.
- Configure networking, access controls, and environment settings in coordination with senior engineers and security personnel.
CI/CD & Secure Software Delivery- Develop and maintain Azure DevOps pipelines that automate application builds, testing, and deployments.
- Integrate and maintain code, dependency, container image, and infrastructure security checks using established tools and processes.
- Maintain deployment scripts, pipeline templates, artifacts, and release configurations, and support release approvals.
- Support deployments within restricted environments, following approved procedures for software dependencies and artifact handling.
- Work with developers to troubleshoot pipeline failures, deployment issues, and configuration differences across development, test, and production environments.
Security & Compliance- Implement and maintain assigned security controls in accordance with applicable Department of Commerce, NTIA, and federal requirements.
- Apply approved configuration baselines and STIGs where required, and remediate identified vulnerabilities with guidance from security personnel.
- Support RMF, ATO, and continuous monitoring activities by collecting technical evidence and tracking remediation actions.
- Maintain secure handling of credentials, secrets, and deployment artifacts throughout the delivery process.
Reliability & Operations- Configure and maintain monitoring, centralized logging, and alerts using established tools and standards.
- Investigate infrastructure and application issues, review logs, and support incident response and root cause analysis.
- Execute and help test backup, recovery, and rollback procedures.
- Keep deployment documentation, configuration records, and operational runbooks current.
- Support new application releases and production transitions in coordination with the broader engineering team.
Required Qualifications- Active Secret security clearance or higher is required.
- Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
- Bachelor's degree in Computer Science, Engineering, or a related field and three or more years of relevant DevOps/cloud engineering experience, or five or more years of relevant experience in lieu of a degree.
- Hands-on experience deploying and maintaining infrastructure in Microsoft Azure.
- Experience creating, modifying, and troubleshooting Azure DevOps YAML pipelines for builds, testing, security scanning, and deployments.
- Experience supporting application deployments across development, test, and production environments.
- Practical experience using Infrastructure as Code tools such as Terraform, Bicep, ARM templates, or comparable technologies.
- Experience building and running containers using Docker, with working knowledge of Kubernetes and Helm.
- Ability to write and troubleshoot automation scripts using Python, PowerShell, Bash, or similar languages.
- Experience using Git-based version control, including branches, pull requests, and collaborative code reviews.
- Working knowledge of Linux administration, cloud networking, access controls, secrets management, and monitoring and logging.
- Ability to investigate technical issues, document solutions, communicate progress, and work independently on assigned tasks while collaborating with the team.
Preferred Qualifications- Experience with Azure Government, Azure Government Secret, or other restricted federal environments.
- Experience supporting federal system modernization or operational cloud services.
- Familiarity with NIST SP 800-53 controls, RMF, ATO support activities, or STIGs.
- Experience using security scanning tools such as Nessus, SonarQube, Microsoft Defender for Cloud, Aqua Security, or comparable products.
- Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
- Familiarity with database or search platforms such as SQL Server, PostgreSQL, Elasticsearch, or OpenSearch.
- Exposure to data engineering or machine learning workloads, including platforms such as Databricks or Apache Spark.
- Relevant Microsoft Azure administration, development, DevOps, or security certifications.
Benefits:Expression offers competitive salaries and benefits, such as:
- 401k matching
- PPO and HDHP medical/dental/vision insurance
- Education reimbursement
- Complimentary life insurance
- Generous PTO and holiday leave
- Onsite office gym access
- Commuter Benefits Plan
