DevOps Engineer – Secure Infrastructure & CI/CD

3GIMBALS; Quantico (VA); On-site; USD 130,000 - 160,000; Full time

Job summary

3GIMBALS is seeking a DevOps Engineer to build and maintain the infrastructure, automation, and deployment pipelines for our unclassified PAI/CAI-based analytic platform. You will implement IaC, CI/CD, containerization, observability, and security automation across development and production, including air-gapped environments.

You will collaborate with security teams to enforce RMF/NIST controls, SSO, and zero-trust practices while delivering reliable, scalable software in mission-critical

Qualifications

• 4+ years of DevOps, SRE, or platform engineering experience.
• Strong experience with containerization and orchestration (Docker, Kubernetes).
• Proficiency with infrastructure-as-code (Terraform, Ansible, or CloudFormation).
• Hands‑on experience building CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins, or similar).
• Experience with cloud platforms (AWS, Azure, or GCP).
• Scripting skills in Python, Bash, or Go.

Responsibilities

• Design, provision, and manage cloud and on-premises infrastructure using infrastructure-as-code.
• Build and maintain container orchestration platforms (Kubernetes, Docker).
• Automate provisioning, configuration, scaling, and environment management.
• Manage infrastructure across development, test, and production environments, including restricted or air-gapped networks.
• Design and maintain CI/CD pipelines for application, data, and model deployments.
• Implement automated build, test, security-scan, and deployment workflows.
• Support reproducible builds and artifact/registry management.
• Enable rapid, reliable, and rollback-capable releases.
• Implement monitoring, logging, alerting, and tracing.
• Establish service-level objectives and support incident response and reliability engineering.
• Optimize the performance, availability, and cost of platform infrastructure.
• Integrate security scanning, secrets management, and vulnerability management into pipelines.
• Implement system hardening, patching, and compliance automation.
• Support Authority to Operate (ATO), continuous monitoring, and RMF/NIST controls.
• Implement zero-trust, encryption, and secure network segmentation practices.
• Experience operating production systems with high-availability and security requirements.

Skills

Docker

Kubernetes

Terraform

Ansible

CloudFormation

CI/CD pipelines

GitLab CI

GitHub Actions

Jenkins

AWS

Azure

GCP

Python

Bash

Go

Tools

Terraform

Ansible

CloudFormation

Job description

Role Overview

3GIMBALS is seeking a DevOps Engineer to build and maintain the infrastructure, automation, and deployment pipelines that keep our unclassified PAI/CAI-based analytic platform reliable, secure, and continuously deliverable. This role is responsible for infrastructure-as-code, CI/CD, containerization and orchestration, observability, and security automation across development and production environments, including operation within secure and restricted networks. The ideal candidate treats infrastructure as software and security as a first-class, automated concern.

Role Overview

3GIMBALS is seeking a DevOps Engineer to build and maintain the infrastructure, automation, and deployment pipelines that keep our unclassified PAI/CAI-based analytic platform reliable, secure, and continuously deliverable. This role is responsible for infrastructure-as-code, CI/CD, containerization and orchestration, observability, and security automation across development and production environments, including operation within secure and restricted networks. The ideal candidate treats infrastructure as software and security as a first-class, automated concern.

Key Responsibilities

Infrastructure & Automation

• Design, provision, and manage cloud and on-premises infrastructure using infrastructure-as-code
• Build and maintain container orchestration platforms (Kubernetes, Docker)
• Automate provisioning, configuration, scaling, and environment management
• Manage infrastructure across development, test, and production environments, including restricted or air-gapped networks

CI/CD & Release Engineering

• Design and maintain CI/CD pipelines for application, data, and model deployments
• Implement automated build, test, security-scan, and deployment workflows
• Support reproducible builds and artifact/registry management
• Enable rapid, reliable, and rollback-capable releases

Observability & Reliability

• Implement monitoring, logging, alerting, and tracing
• Establish service-level objectives and support incident response and reliability engineering
• Optimize the performance, availability, and cost of platform infrastructure

Security & Compliance (DevSecOps)

• Integrate security scanning, secrets management, and vulnerability management into pipelines
• Implement system hardening, patching, and compliance automation
• Support Authority to Operate (ATO), continuous monitoring, and RMF/NIST controls
• Implement zero-trust, encryption, and secure network segmentation practices

Required Qualifications

Technical Expertise

• 4+ years of DevOps, SRE, or platform engineering experience
• Strong experience with containerization and orchestration (Docker, Kubernetes)
• Proficiency with infrastructure-as-code (Terraform, Ansible, or CloudFormation)
• Hands‑on experience building CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins, or similar)
• Experience with cloud platforms (AWS, Azure, or GCP)
• Scripting skills in Python, Bash, or Go

Operations & Security

• Experience with monitoring/observability stacks (Prometheus, Grafana, ELK)
• Understanding of DevSecOps practices, secrets management, and vulnerability scanning
• Familiarity with Linux system administration and networking fundamentals
• Experience with secure software supply chain and artifact management

Domain Knowledge

• Experience operating production systems with high-availability and security requirements

Preferred Qualifications

• Active security clearance or ability to obtain one
• Experience in government, defense, or intelligence contracting environments
• Experience deploying in secure/classified, restricted, or air-gapped environments
• Knowledge of federal compliance frameworks (FedRAMP, FISMA, NIST 800-53, RMF) and ATO processes
• Experience with AWS GovCloud or Azure Government
• Familiarity with MLOps and data-pipeline deployment
• Relevant certifications (CKA/CKAD, AWS/Azure, Security+)

Technical Environment

• Infrastructure-as-Code: Terraform, Ansible
• Containers: Docker, Kubernetes
• CI/CD: GitLab CI, GitHub Actions, or Jenkins
• Observability: Prometheus, Grafana, ELK
• Cloud: AWS GovCloud, Azure Government
• Security: DevSecOps tooling, secrets management, zero‑trust, RMF / NIST controls

This role keeps the platform running and shipping: secure, automated infrastructure and pipelines that let every other team deliver capability quickly and safely in mission-critical environments.

Salary: $130000 - $160000 per year