Job DescriptionSenior DevSecOps Engineer to support a large, secure Department of Defense (DoD) healthcare cloud environment. This is a fully remote, hands-on engineering position responsible for engineering, automating, securing, maintaining, and troubleshooting enterprise container platforms and the DevSecOps technologies that support them.
The ideal candidate will have deep, demonstrated Kubernetes experience, preferably including Red Hat OpenShift, along with strong Infrastructure as Code (IaC), CI/CD, Linux, cloud, automation, and troubleshooting skills.
This position requires more than expertise with individual tools. The successful candidate will understand how the components of a modern DevSecOps platform work together and will be capable of troubleshooting complex problems across Kubernetes, Linux, cloud infrastructure, networking, security, identity, CI/CD pipelines, and application workloads.
Strong communication and customer interaction skills are essential. This engineer will work directly with application teams and other customers to understand requirements, resolve technical issues, and help teams successfully deploy and operate applications within the DevSecOps environment.
As a senior member of the engineering team, this individual will also be expected to provide advanced technical input and mentor less experienced engineers.
Responsibilities- Engineer, administer, maintain, upgrade, secure, and troubleshoot enterprise Kubernetes and Red Hat OpenShift environments supporting development, staging, and production workloads.
- Develop and maintain Infrastructure as Code (IaC) and configuration automation using technologies such as Terraform and Ansible/Ansible Automation Platform.
- Design, develop, maintain, and troubleshoot CI/CD pipelines supporting automated software build, testing, security scanning, artifact management, and deployment.
- Troubleshoot complex technical problems spanning Kubernetes/OpenShift, Linux, cloud infrastructure, networking, DNS, certificates, authentication, storage, containers, CI/CD pipelines, and application workloads.
- Work directly with customers and application teams to understand technical requirements, identify pain points, evaluate solutions, and resolve platform and application deployment issues.
- Implement and support security throughout the software delivery lifecycle, including vulnerability scanning, container security, secrets management, artifact security, software supply-chain security, and Software Bills of Materials (SBOMs).
- Support vulnerability remediation, system hardening, cybersecurity compliance, and authorization/accreditation activities.
- Support container registries, artifact repositories, identity and access management, security scanning, and related DevSecOps platform services.
- Monitor and optimize system resources, including performance, capacity, availability, serviceability, and recoverability.
- Develop and maintain technical documentation, system administration procedures, troubleshooting guides, engineering standards, and standard operating procedures.
- Participate in system architecture, platform modernization, and technology evaluation efforts.
- Provide technical guidance, mentoring, knowledge sharing, and troubleshooting assistance to other engineers.
- Participate in technical and code reviews and help establish engineering standards and best practices across the team.
- Collaborate with cloud, infrastructure, networking, cybersecurity, application development, and customer teams to resolve issues that cross technical boundaries.
This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth.
Requirements- Active U.S. Government Secret security clearance.
- Minimum of five (5) years of demonstrated hands-on experience engineering, administering, and troubleshooting Kubernetes environments. Experience should include installation, configuration, operation, upgrades, troubleshooting, and maintenance of development, staging, and/or production Kubernetes environments.
- Strong Linux systems administration and troubleshooting experience, preferably with Red Hat Enterprise Linux (RHEL).
- Demonstrated experience developing and maintaining Infrastructure as Code (IaC) using technologies such as Terraform.
- Demonstrated experience with configuration management and infrastructure automation using technologies such as Ansible.
- Strong hands-on experience designing, maintaining, and troubleshooting CI/CD pipelines.
- Experience with Git-based development workflows and platforms such as GitLab.
- Strong understanding of containers, container images, container registries, and container lifecycle management.
- Strong understanding of Kubernetes concepts including networking, ingress, DNS, storage, RBAC, certificates, secrets, resource management, workload scheduling, deployments, services, and cluster operations.
- Demonstrated ability to troubleshoot complex technical issues across multiple layers of infrastructure and software.
- Experience with cloud infrastructure and services, preferably Amazon Web Services (AWS).
- Experience implementing or supporting security controls and automated security testing within DevSecOps environments.
- Demonstrated experience working directly with customers or application teams to gather requirements, troubleshoot issues, and develop technical solutions.
- Strong written and verbal communication skills with the ability to communicate complex technical issues to both technical and non-technical audiences.
- Demonstrated ability to mentor engineers and provide technical guidance to other team members.
Preferred Experience- Significant hands-on engineering and administration experience with Red Hat OpenShift.
- Experience migrating Kubernetes platforms and application workloads to Red Hat OpenShift.
- Experience with Rancher and RKE2 Kubernetes environments.
- Experience operating Kubernetes/OpenShift workloads within AWS, including AWS GovCloud.
- Experience with GitLab Ultimate and enterprise CI/CD environments.
- Experience with container and DevSecOps technologies such as Harbor, Trivy, Red Hat Advanced Cluster Security (RHACS), HashiCorp Vault, and Artifactory.
- Experience implementing or supporting SBOMs, preferably using CycloneDX, and software supply-chain security practices.
- Experience with observability and monitoring technologies such as Prometheus, Grafana, Splunk, and OpenTelemetry.
- Experience with identity and access management technologies such as Keycloak.
- Experience with container registries, artifact repositories, vulnerability scanning, image promotion, and secure software delivery practices.
- Experience with Ansible Automation Platform (AAP).
- Familiarity with Zero Trust principles and their application to cloud-native applications and workloads.
- Experience working within a DoD, federal government, healthcare, or other highly regulated environment.
- Experience navigating DoD cybersecurity, network, access, authorization, and accreditation requirements.
- Experience supporting platform modernization or large-scale Kubernetes/OpenShift migration initiatives.
- Experience working in a DevOps or DevSecOps environment using Agile methodologies.
