DevSecOps Configuration Manager - FedRAMP & Kubernetes

Strategic Innovation Group, LLC; Arlington (VA); On-site; USD 115,000 - 135,000; Full time

Benefits offered by this job

Health insurance

401(k) with match

Generous PTO

Job summary

Strategic Innovation Group, LLC seeks a Configuration Manager to own the platform‑engineering and configuration‑control backbone of a new analytics platform inside a federal client’s on‑prem FedRAMP Moderate environment. You’ll lead CI/CD, container builds, security scanning, and deployments with client CIO and security leads collaboration.

Responsibilities include maintaining CM plans, SBOM generation, and logging integration with Splunk.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field; equivalent experience may be considered.
• 3+ years in configuration management, release engineering, DevOps, or platform engineering roles, including 1+ years operating CI/CD and container platforms in a federal or FedRAMP environment.
• Hands‑on experience administering CI/CD pipelines in Jenkins and/or Azure DevOps, integrated with GitLab or a comparable Git platform.
• Hands‑on experience deploying and operating containerized applications on Kubernetes (Rancher, OpenShift, or comparable enterprise distribution).
• Experience integrating security scanning (SAST, container image, dependency/SCA) into pipelines and managing findings with development teams.
• Experience establishing configuration baselines, change control, and release management under a documented CM plan.
• Working knowledge of NIST SP 800-53 configuration-management controls and experience supporting an ATO or FedRAMP authorization package.
• Scripting proficiency (Bash, Python, or PowerShell) and infrastructure‑as‑code experience (Helm, Terraform, Ansible, or equivalent).

Responsibilities

• Establish and operate the CI/CD pipeline (Jenkins or Azure DevOps) integrated with GitLab for code delivery, covering build, automated test, security scanning, artifact creation, and deployment to designated environments.
• Manage container image builds, image and dependency vulnerability scanning, SBOM generation, and the process for requesting client approval of new dependencies and licenses.
• Deploy and maintain application workloads on the client's Rancher-managed Kubernetes platform; manage environment configuration, secrets handling, and promotion between development, test, and production namespaces.
• Define and maintain the configuration management plan: baselines for code, infrastructure-as-code, data models, and documents; change control and release procedures; version and tagging conventions.
• Integrate application and platform logging with the client's Splunk instance and support audit-logging requirements from the security lead.
• Coordinate the technical establishment of interconnections and environment access with client CIO staff; track and resolve blockers to environment readiness.
• Maintain deliverable and document configuration control, including the source-code and documentation package delivered to the client repository at acceptance.
• Support the System Security Plan with configuration-management (CM family) control implementation evidence.
• Deliver pipeline and platform runbooks and knowledge transfer to the client-designated support team during transition.

Skills

Security scanning

Scripting

Configuration baselines

Change control

Release management

NIST SP 800-53

CI/CD pipelines

Education

Bachelor's degree in Computer Science or related field

Equivalent experience acceptable

Tools

Jenkins

Azure DevOps

GitLab

Kubernetes (Rancher/OpenShift)

Terraform

Helm

Job description

Strategic Innovation Group, LLC seeks a Configuration Manager to own the platform‑engineering and configuration‑control backbone of a new analytics platform inside a federal client’s on‑prem FedRAMP Moderate environment. You’ll lead CI/CD, container builds, security scanning, and deployments with client CIO and security leads collaboration.

Responsibilities include maintaining CM plans, SBOM generation, and logging integration with Splunk.