DevSecOps Engineer - Infrastructure

Phoenixoutcomes; United States; A distancia; USD 140.000 - 210.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

Descripción de la vacante

PhoenixTeam seeks an experienced DevSecOps Engineer - Infrastructure to architect AWS infrastructure and IaC patterns for a FedRAMP-enabled environment. You will define account structures, VPCs, and network connectivity, while driving automated pipelines that promote changes through Production.

This role emphasizes architecture over hands-on config and requires strong security posture integration. Collaborate with Solutioning and Ops managers to align migration timelines, and ensure interfaces

Formación

• Experience architecting AWS infrastructure using IaC with Terraform and CloudFormation.
• Experience building CI/CD pipelines delivering changes to Production (e.g., Jenkins, GitHub Actions).
• Experience designing secure integration within a FedRAMP-authorized GovCloud environment.
• Hands-on with Red Hat Enterprise Linux (RHEL) server infrastructure and migrations.

Responsabilidades

• Architect the AWS Infrastructure-as-Code approach (Terraform, CloudFormation) for RHEL 8 servers across environments.
• Design AWS account structure, VPCs, and network connectivity.
• Account for integrations with 30+ internal/external partners in a FedRAMP environment.
• Own the CI/CD automation pipeline design (e.g., Jenkins, GitHub) from build to Production deployment.
• Define reusable IaC templates and standards for repeatable migrations across environments.
• Lead environment tier build-out sequencing and validation before promotion to next tier.
• Provide architectural direction and design reviews for automation and server configuration.
• Support RDS instances provisioning as part of environment migrations with the Database Admin.

Conocimientos

AWS IaC

Terraform

CloudFormation

Jenkins

GitHub Actions

FedRAMP GovCloud

RHEL 8

Nessus

Turbot

Agile

Educación

Bachelor’s degree

Associate’s degree in lieu of Bachelor’s

High School Diploma in lieu of Bachelor’s

Herramientas

Jira

Confluence

Venafi

F5

GitHub

Descripción del empleo

All Jobs > DevSecOps Engineer - Infrastructure

The AWS Infrastructure Engineer supports the Operations workstream of a large federal client's technology operations, maintenance, and enhancement program, providing infrastructure architecture and automation support. This is an architect-level role: the engineer designs the AWS infrastructure-as-code approach and CI/CD automation that the delivery team executes, rather than performing day-to-day, hands-on-keyboard configuration.

Working alongside the Solutioning Architect, DevOps Engineers, and Systems Engineers, this person architects the AWS account structure, instance provisioning, and network connectivity needed to stand up RHEL 8 servers across multiple non-production and production environments, and defines the Infrastructure-as-Code (Terraform, AWS CloudFormation) templates and standards used to build and repeat that migration across each environment tier. The role also owns the architecture for automating the CI/CD pipeline that builds, tests, and promotes infrastructure and application changes up through Production.

Success in this role requires deep, architecture-level expertise in AWS infrastructure and Infrastructure-as-Code (Terraform and/or CloudFormation), strong familiarity with DevSecOps and Agile delivery practices, and the ability to translate migration requirements into a solution design that aligns with the client's governance and security standards.

Key Functions

• Architect the AWS Infrastructure-as-Code approach (Terraform, CloudFormation) used to stand up and configure RHEL 8 servers across multiple non-production and production environments.
• Design AWS account structure, EC2 instance provisioning, VPC configuration, and network connectivity.
• Account for the system's 30+ internal and external partner integrations when designing secure interface patterns for a FedRAMP-authorized (GovCloud) environment, ensuring those patterns are repeatable across the full range of non-production and production environment tiers.
• Own the architecture for automating the CI/CD pipeline (e.g., Jenkins, GitHub) that builds, tests, and deploys infrastructure and application changes up through Production.
• Define reusable Terraform and CloudFormation templates and IaC standards to ensure consistency and repeatability as the migration approach is repeated across each environment tier.
• Help define the environment tier build-out sequence and validation strategy — determining which environment tier is stood up and migrated first and how it is validated before promoting the migration to the next tier.
• Provide technical direction and design review to DevOps Engineers and Systems Engineers executing infrastructure automation and RHEL 8 server configuration.
• Support the architecture for standing up and configuring RDS instances as part of the environment migration, in coordination with the Database Administrator.
• Support planning for Jenkins job migration and DNS cutover (F5) activities at an architecture and design level.
• Incorporate vulnerability and cloud security posture scanning (e.g., Nessus, Turbot) into the infrastructure architecture.
• Participate in and help lead technical discovery and design sessions with application, infrastructure, security, and cloud engineering stakeholders.
• Ensure infrastructure designs comply with the client's technical reference model, ATO/POA&M requirements, and DevSecOps best practices.
• Help evaluate which existing POA&Ms are addressed or closed as a result of the RHEL 7 to RHEL 8 migration.
• Support performance testing, monitoring, and remediation activities by providing infrastructure-level analysis and recommendations.
• Document architecture decisions, infrastructure designs, and runbooks in Confluence and Jira.
• Coordinate with the Solutioning Architect and Operations Manager to ensure infrastructure delivery aligns with the overall migration timeline.
• Maintain positive working relationships with the federal client, delivery teams, and technical stakeholders while supporting mission-critical systems.

Requirements

Minimum Qualifications

• Bachelor’s degree and 5 years of relevant experience.
• An additional 2 years of experience (7 years total) with an Associate’s Degree in lieu of a Bachelor’s Degree.
• An additional 4 years of experience (9 years total) with a High School Diploma in lieu of a Bachelor’s Degree.
• Demonstrated experience architecting AWS infrastructure using Infrastructure-as-Code, with hands-on expertise in Terraform and AWS CloudFormation.
• Experience designing and automating CI/CD pipelines that deploy changes up through Production (e.g., Jenkins, GitHub/GitHub Actions).
• Experience architecting AWS account structures, VPCs, instance provisioning, and network connectivity.
• Experience designing secure integration and interface patterns within a FedRAMP-authorized (GovCloud) environment.
• Experience with Red Hat Enterprise Linux (RHEL) server infrastructure, including OS version migrations.
• Experience incorporating vulnerability and cloud security posture management scanning (e.g., Nessus, Turbot) into infrastructure architecture and design.
• Experience supporting DevSecOps practices and Agile delivery.
• Ability to translate infrastructure and migration requirements into architecture-level solution designs and documentation.
• Strong analytical and technical leadership skills — this is an architecture- and design-focused role that provides technical direction rather than day-to-day, hands-on configuration.
• Excellent verbal and written communication skills, with the ability to lead technical discussions across cross-functional and federal stakeholder teams.
• Strong attention to detail and organizational skills.

Preferred Qualifications or Skills

• Experience supporting federal government systems.
• Experience with AWS RDS / PostgreSQL infrastructure.
• Experience automating certificate renewal and installation using Venafi.
• Familiarity with federal agency technical reference models and ATO/POA&M processes.
• AWS certification (e.g., AWS Certified Solutions Architect – Professional).
• Experience using Jira and Confluence, including version-controlled documentation practices.
• Experience supporting large-scale server or operating system migration projects.
• Familiarity with F5 and DNS cutover activities.
• Employment type: Full-Time, W2
• Location: 100% Remote (US-based)
• Hours: 40 hours/week with availability during core business hours of 8am–5pm ET
• Eligibility: Must be eligible to obtain a Public Trust clearance

About PhoenixTeam

PhoenixTeam partners with organizations to deliver real results across GenAI, data, product, and technology. We help clients modernize legacy systems, redesign complex workflows, and move practical AI and digital solutions into production in regulated environments.

PhoenixTeam is an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, religion, sex, national origin, age, disability, genetic information, protected veteran status, or any other status protected by applicable law.