**Role overview**
Build and operate secure cloud infrastructure and delivery systems for a large online platform serving a federal civilian program. The role spans infrastructure as code, Kubernetes delivery, security controls, observability, and production support, with close collaboration across application engineering.
Responsibilities
- Provision and maintain AWS environments using reusable Terraform modules and managed state.
- Run GitOps deployments with ArgoCD and Helm on Kubernetes, with EKS as a preferred environment.
- Strengthen CI/CD security through image, dependency, and secret scanning and policy enforcement.
- Manage cloud identity, secrets, and network boundaries in line with federal requirements.
- Set up logging, metrics, and alerting; take part in on-call response and production troubleshooting.
- Support authorization and compliance work by implementing controls, gathering evidence, and addressing findings.
Requirements
- 4-7 years in DevOps, platform, or infrastructure engineering, with a security focus.
- Hands-on Terraform expertise, including modules, state management, and multi-environment design.
- Production experience with ArgoCD, Helm, and Kubernetes.
- Strong AWS knowledge, including IAM, VPC, ECS or EKS, RDS, and CloudWatch.
- Working knowledge of container security and software supply-chain hardening; able to debug across infrastructure and application layers.
- U.S. citizenship, U.S. location, and eligibility to obtain and maintain a federal Public Trust clearance; an active clearance is preferred.
Nice to have
- Experience supporting a federal civilian program or working with NIST 800-53, FedRAMP, or authorization processes.
- Familiarity with policy tools such as OPA/Gatekeeper, Kyverno, or Sentinel, and with Kubernetes service mesh, ingress, or certificate management.
- Relevant cloud or Kubernetes certifications.