DevSecOps / Cloud Hosting Engineer
Socket.dev
Get more replies from employers
Send a job-specific resume in minutes.
Job summary
Socket.dev seeks a DevSecOps / Cloud Hosting Engineer to own and operate the cloud environment hosting an operator application used in a national cyber defense command center. You will stand up the environment, manage its pipeline, and maintain security controls and evidence for authorization.
Responsibilities include cloud architecture ownership, container orchestration, content delivery, streaming services, and secure, IaC-driven deployments. On-site in the Washington, D.C.
Qualifications
- Hands-on cloud infra ownership in regulated/government environments.
- Container orchestration with cluster config, autoscaling, and troubleshooting.
- Experience with long-lived client connections or streaming services.
- CI/CD pipelines with automated security scanning.
- Infrastructure as code (IaC) definitions.
- Identity, access control, secrets management, and encryption experience.
- RMF or equivalent frameworks with continuous monitoring/evidence collection.
- One current cloud platform or container‑orchestration certification.
- Bachelor’s degree or equivalent experience.
- Active Top Secret clearance.
- U.S. citizenship.
- On-site work at a Washington, D.C.-area facility; not remote or hybrid.
Responsibilities
- Own cloud hosting architecture including network segmentation and private endpoints.
- Operate the container orchestration platform, including autoscaling and storage.
- Manage content delivery, object storage origin, and load-balanced routing.
- Maintain high-capacity gateway and streaming services for many client connections.
- Ensure development, test, and production are isolated; manage capacity, cost, and performance.
- Build and maintain CI/CD pipelines with security scanning.
- Define infrastructure as code for reproducible environments.
- Implement encryption, IAM, and access control; security governance.
Skills
Education
Job description
Regular
Interim Top Secret
Top Secret/SCI
None
Cyber and IT Risk Management
Skills: Autoscaling, Cloud Computing, Cloud Infrastructure, Container Orchestration, DevSecOps
Certifications: None
Experience: 5 + years of related experience
US Citizenship Required: Yes
The DevSecOps / Cloud Hosting Engineer owns and operates the cloud environment hosting an operator application used in a national cyber defense command center. The environment supports independently deployed services, gateway and streaming infrastructure, and the static delivery path for the application. The engineer stands up the environment, manages its pipeline, and maintains the security controls and evidence required for authorization.
- Own the cloud hosting architecture, including network segmentation, routing, and private endpoints.
- Operate the container orchestration platform, including node configuration, autoscaling, and persistent storage.
- Manage content delivery, object storage origin, and load‑balanced routing.
- Operate high‑capacity gateway and streaming services supporting many long‑lived client connections.
- Maintain separation across development, test, and production; manage capacity, cost, and performance.
- Build and maintain CI/CD pipelines enabling frequent, low‑risk releases.
- Define infrastructure as code for reproducible, reviewable environments.
- Integrate automated security, dependency, image, and configuration scanning.
- Maintain release, promotion, and rollback procedures, including service‑level isolation under pressure.
- Own the environment’s security configuration and alignment to the required control baseline.
- Implement identity and access control, policy guardrails, identity federation, and managed secrets.
- Implement encryption in transit and at rest using managed key services.
- Own the authorization boundary and support the authorization process through boundary definition, control implementation, and evidence collection.
- Maintain continuous monitoring through configuration compliance, posture management, audit trails, and flow logging; remediate findings.
- Implement monitoring and alerting capable of detecting degradation early, including streaming‑layer health.
- Maintain backup, recovery, and availability capabilities for continuous operations.
- Respond to environment incidents, including after hours, and lead root‑cause resolution.
- Document environment behavior, dependencies, and recovery procedures.
- Work with application engineers to design deployment, scaling, configuration, and secrets handling.
- Provide developer support without weakening security posture.
- Contribute to hosting, deployment, and authorization‑boundary architectural decisions.
- Obtain and maintain required training and certificates; certification currency is reported monthly.
- Hands‑on experience owning and operating cloud infrastructure in regulated or government environments.
- Production experience with container orchestration, including cluster configuration, autoscaling, and troubleshooting.
- Experience operating services with many long‑lived client connections or comparable streaming systems.
- Experience maintaining CI/CD pipelines with automated security scanning.
- Experience defining infrastructure as code.
- Experience implementing identity, access control, secrets management, and encryption.
- Working knowledge of RMF or equivalent frameworks, including continuous monitoring and evidence collection.
- One current cloud platform or container‑orchestration certification.
- Bachelor’s degree in a technical field and 5 years of relevant experience (or equivalent experience).
- Active Top Secret clearance.
- U.S. citizenship.
- On‑site work at a Washington, D.C.‑area government facility; not remote or hybrid.
- Experience with AWS GovCloud, Azure Government, or similar government cloud regions; experience with FedRAMP or DoD accreditation.
- Experience with Kubernetes distributions such as Amazon EKS or Azure Kubernetes Service.
- Experience with Terraform, CDK, or Bicep.
- Experience supporting an initial authorization to operate (ATO).
- Platform certifications such as AWS DevOps Engineer, AWS Solutions Architect, Azure Solutions Architect, or CKA.
- Security certifications such as AWS Security Specialty, Azure Security Engineer, Security+, or CISSP.
- Experience with zero‑trust patterns, workload identity, and service mesh.
- Experience operating environments subject to independent security assessment.
The likely salary range for this position is $127,500 - $172,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
40
Less than 10%
Onsite
USA VA Arlington
Our benefits package for all US‑based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post‑tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long‑term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission‑ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
