DevOps Engineer (Active TS/SCI)

Marathon TS; Dayton (OH); On-site; USD 110,000 - 160,000; Full time

Job summary

Marathon TS is seeking a software engineer with 3-6 years of experience to design and maintain Flask-based REST APIs and backend services in a secure environment. The role emphasizes secure coding, CI/CD pipelines with automated tests, and on-call incident response.

Candidates should be proficient in Python, Flask, Git, Linux, Docker, and cloud services, with experience in IaC tools like Terraform/Ansible. A TS/SCI clearance is required or eligible. Dayton, Ohio area preferred.

Qualifications

• 3-6 years of professional software engineering experience.
• Strong proficiency in Python and Flask building secure RESTful APIs.
• Solid understanding of security fundamentals (authN/authZ, OWASP Top 10).
• Hands-on experience with Git, Linux, Docker, and CI/CD pipelines.
• Experience with databases and data modeling (SQL/ORM; PostgreSQL/MySQL).
• Familiarity with infrastructure-as-code and cloud services (AWS/Azure/GCP).
• Excellent communication and collaboration across teams.
• Optional: eligibility to obtain and maintain a U.S. government security clearance.

Responsibilities

• Design, develop, and maintain Flask-based REST APIs and backend services.
• Implement secure data access layers and authentication/authorization (OAuth2/JWT).
• Build and improve CI/CD pipelines with integrated security scanning.
• Create and maintain automated tests and quality gates.
• Containerize services with Docker and support deployment/orchestration patterns.
• Use Terraform/Ansible and configuration management best practices.
• Integrate security scanning; remediate findings and enforce secure coding.
• Implement secrets management and least-privilege access.
• Implement logging/metrics/monitoring; support alerts and dashboards.
• Support incident response/on-call rotations and postmortems.
• Participate in Agile/Scrum ceremonies, code reviews, and engineering standards.
• Produce API docs, designs, runbooks, and compliance artifacts.

Skills

Python

Flask

Security fundamentals

Git

Linux

CI/CD pipelines

REST APIs

Strong communication

Agile/Scrum

Tools

Docker

Kubernetes

OpenShift

Terraform

Ansible

OAuth2

SAST/DAST/SCA tooling

Job description

Must have active TS/SCI clearance. Will consider TS for the right candidate.

Key Responsibilities:

• Design, develop, and maintain Flask-based REST APIs and backend services
• Implement secure data access layers and authentication/authorization (e.g., OAuth2/JWT)
• Build and improve CI/CD pipelines (automated builds, tests, deployments) with integrated security scanning
• Create and maintain automated tests (unit/integration/API) and maintain quality gates
• Containerize services (e.g., Docker) and support deployment/orchestration patterns as needed
• Use infrastructure-as-code (e.g., Terraform/Ansible) and configuration management best practices
• Integrate and act on security scanning (SAST/DAST/SCA); remediate findings and follow secure coding practices
• Implement secrets management using approved vault/secret managers; enforce least privilege
• Implement logging/metrics/monitoring; support alerting and dashboards
• Support incident response/on-call rotations, perform root-cause analysis, and contribute to postmortems
• Participate in Agile/Scrum ceremonies, code reviews, and engineering standards
• Produce and maintain documentation (API docs, designs, runbooks, compliance artifacts)

Basic Qualifications:

• 3-6 years of professional software engineering experience
• Strong proficiency in Python and Flask building secure RESTful APIs
• Solid understanding of security fundamentals (authN/authZ, OWASP Top 10 concepts, key/secret handling)
• Hands-on experience with Git, Linux, Docker, and CI/CD pipelines
• Proficiency with automated testing practices and frameworks
• Experience with databases and data modeling (SQL/ORM; e.g., PostgreSQL/MySQL)
• Familiarity with infrastructure-as-code and cloud services (AWS/Azure/GCP)
• Experience with logging/monitoring and operational best practicesStrong communication skills and ability to collaborate with cross-functional teams
• Optional (if required by program): eligibility to obtain and maintain a U.S. government security clearance

Preferred Qualifications:

• Experience with Kubernetes/OpenShift
• Experience with Terraform/Ansible and secret managers (e.g., Vault or cloud-native equivalents)
• Familiarity with OAuth2/OIDC, SSO, and API gateway patterns
• Hands-on with SAST/DAST/SCA tooling and SBOM practices
• Performance tuning and scalability experience for Flask services

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status").