Job Type: Full- Time
Workplace Type: Onsite
Clearance: Active TS/SCI
Must be a U.S. Citizen Benefits: Medical, dental, and vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too.
Job Summary Castalia Systems is currently searching for a DevOps Engineer Tech 3 to join our team. As a DevOps Engineer, you will play a crucial role in automating and optimizing our DevOps toolchain, ensuring seamless collaboration between development and operations teams. Your expertise in automating processes and integrating tools will directly impact the efficiency and quality of our software delivery. This will include optimizing existing CI/CD pipelines to work in AirGap cloud settings and support automation of customer development desktops for the best customer experience possible.
Roles and Responsibilities A qualified candidate will perform the following duties and responsibilities, but are not limited to:
- Design, deploy, and operate Azure infrastructure using IaC (Bicep/Terraform) for repeatable, scalable environments.
- Build and maintain Azure Pipelines to automate provisioning of VMs, Key Vault, networking, and platform services.
- Enforce GitOps-based baselines for versioned, traceable, consistent configuration across environments.
- Create and maintain • golden image• pipelines using Packer (images-as-code) to support enterprise workloads.
- Ensure security compliance (CMKs, encryption, approved baselines) and integrate IAM via AD/Entra ID (federation/SSO such as Keycloak).
- Design, deploy, and operate Azure infrastructure using IaC (Bicep/Terraform) for repeatable, scalable environments.
- Build and maintain Azure Pipelines to automate provisioning of VMs, Key Vault, networking, and platform services.
- Enforce GitOps-based baselines for versioned, traceable, consistent configuration across environments.
- Create and maintain • golden image• pipelines using Packer (images-as-code) to support enterprise workloads.
- Ensure security compliance (CMKs, encryption, approved baselines) and integrate IAM via AD/Entra ID (federation/SSO such as Keycloak).
- Operate and maintain secure enterprise environments in alignment with DoD security standards, utilizing vulnerability management tools such as Nessus Security Center.
- Ensure all virtual machines and platform resources are properly configured to send telemetry and logs to a centralized Azure Log Analytics workspace.
- Perform enterprise-scale patching and update management using WSUS or equivalent update management solutions.
- Participate in change management and review boards, supporting boundary changes and ensuring compliance with enterprise governance processes.
- Tailor infrastructure parameter templates to customer workload and hardware requirements.
- Deploy Azure infrastructure via established CI/CD pipelines into enterprise environments.
- Document customer configurations and operational details in Confluence.
- Coordinate with onsite and remote teams to validate configurations and ensure handoff readiness.
- Provide Tier 1 operational support, including automated baseline desktop and software installs (DSC, Packer).
- Develop and maintain automation solutions using Bicep and/or Terraform to minimize manual intervention and improve deployment reliability.
- Support container image movement and lifecycle management using tools such as Skopeo, Crane, and Podman, ensuring secure and repeatable container workflows.
- Architect and develop, automate, deploy and manage AKS based applications to support developers
Required Qualifications: - Bachelor's degree in computer science, Engineering, Finance, Business, or related.
- 5-8 years demonstrated performance in related technology.
- Security+ Certification.
- Experience using HCL languages such as Packer and Terraform.
- Experience using Microsoft Azure Bicep.
Physical Requirements/Work Environment - Normal office environment.
Travel 
