Senior DevSecOps Engineer

Job Title: Senior DevSecOps Engineer

Job Category: Engineering

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

The Opportunity:
As part of the Clairvoyant program, you will build and support the backbone of a mission-critical, cloud-native ecosystem — a scalable software-hosting and data-dissemination platform designed to accelerate the deployment of advanced analytics. You will bridge complex mission requirements and high-performance automated infrastructure, owning everything from secure pipeline design to cloud resource optimization. As a DevOps / Infrastructure / DevSecOps Engineer on an AWS-based, Kubernetes-native environment, you will:

• Architect Resilience: Design and maintain scalable RKE2/Kubernetes infrastructure on AWS with high availability and fault tolerance.

• Orchestrate Delivery: Build and refine CI/CD pipelines using GitLab CI/CD, ArgoCD, Jenkins, and Helm for seamless code-to-cloud transitions.

• Secure the Stack: Integrate automated security scanning (Trivy, SonarQube) and enforce compliance with government security standards throughout the development lifecycle.

• Optimize Performance: Identify bottlenecks and engineer solutions across cloud and container environments, from cluster tuning to artifact management.

Responsibilities:

• Develop features to automate, scale, test, and secure a Kubernetes-based infrastructure running on AWS with RKE2.

• Build, optimize, and maintain CI/CD pipelines using GitLab CI/CD, Jenkins, and ArgoCD, supporting automated build, test, scan, and deployment workflows.

• Author, template, and manage Helm charts for application and infrastructure deployment across multiple environments.

• Build and maintain hardened Docker container images, including STIG-compliant base images, optimized Dockerfiles, and integration with Harbor and CI/CD pipelines.

• Manage and scale RKE2 Kubernetes clusters, including workload scheduling, networking, RBAC, secrets management, and cluster lifecycle operations.

• Administer Harbor (container registry) and Nexus (artifact repository), ensuring availability, security, and pipeline integration.

• Integrate Trivy and SonarQube into pipelines; remediate findings in coordination with security stakeholders.

• Enhance performance monitoring; identify bottlenecks and optimize cloud infrastructure and resource utilization.

• Author Python and Bash automation scripts to reduce toil and support infrastructure lifecycle management.

• Maintain technical documentation, runbooks, and architecture diagrams.

Qualifications:

Required: 

• Current TS/SCI clearance with Polygraph.

• Bachelor's degree in Computer Science or related field, or equivalent experience.

• 3+ years (mid-level) or 6+ years (senior-level) in DevOps, Infrastructure, or DevSecOps in a cloud environment.

• Advanced proficiency in Python and/or Bash scripting for automation and operational support.

• Strong Linux/Unix command line proficiency, preferably on RHEL-based systems.

• Experience building and maintaining CI/CD pipelines using GitLab CI/CD, Jenkins, ArgoCD, and Helm.

• Strong proficiency with Docker — writing Dockerfiles, building hardened images, and integrating builds into pipelines.

• Hands-on Kubernetes experience — cluster operations, workload management, RBAC, networking, and troubleshooting.

• Familiarity with agile methodologies and ability to operate effectively within a distributed team.

• Ability to travel up to 5% of the time.

Desired:

• Experience with AWS services and cloud-native infrastructure patterns.

• Hands-on experience with Terraform for cloud resource provisioning and IaC.

• Experience with RKE2 or other enterprise Kubernetes distributions in air-gapped or restricted environments.

• Familiarity with Harbor, Nexus, Trivy, and SonarQube in a pipeline context.

• Experience with Cilium for Kubernetes network policy