DevSecOps Platform Engineer

SBS Creatix LLC; St. Louis (MO); Hybrid; USD 140,000 - 190,000; Part time

Job summary

SBS Creatix LLC is seeking a Senior DevSecOps Platform Engineer in a hybrid St. Louis, MO environment.

You will own the enterprise DevSecOps toolchain, support a self-hosted stack, and drive migration toward a SaaS-based approach using GitHub Actions and Atlassian Cloud. You will operate and stabilize the current platform, onboard teams, and partner with security teams to enforce policy, change management, and compliance as we migrate to the cloud.

Qualifications

• 7+ years in DevOps, DevSecOps, or platform engineering.
• Hands-on administration of an enterprise CI platform and pipeline development using shared/reusable libraries.
• Practical GitHub Actions experience - workflows, reusable workflows, runners, secrets.
• Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes.
• Terraform at production scale - modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker.
• Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates.
• Core systems fundamentals: Linux administration; networking; certificates and TLS; identity; SSO/SCIM; RBAC.
• Scripting in Python, Bash, and Groovy.
• Works independently with broad ownership, documents well, and participates in an on-call rotation.

Responsibilities

• Provide ongoing production and operational support to internal teams; resolve incidents, tickets, and operational requests.
• Administer CloudBees CI on EKS and GitHub Enterprise Server – lifecycle, upgrades, access governance, patching, and build troubleshooting.
• Operate Artifactory, Xray, and SonarQube and support their integrations.
• Maintain and extend Terraform infrastructure code through PR-based pipeline workflows.
• Manage Kubernetes workloads on EKS – Helm releases, storage, scaling, and troubleshooting.
• Resolve production issues across compute, storage, networking, identity, and certificate layers.
• Drive vulnerability remediation and patch cadence; write runbooks and documentation.
• Onboard new teams to platform standards and help them adopt CI/CD pipelines, GitHub, and related tooling.
• Partner with Application Security and Cybersecurity to keep security policies, standards, and compliance requirements in place.

Skills

AWS cloud

Terraform

Python scripting

Tools

GitHub Actions

Jenkins/CloudBees CI

Kubernetes (EKS)

Job description

Location: Hybrid - St. Louis, MO (3 days onsite, preferably Wednesday-Friday)

US Citizen or Green Card Candidates Only

Type: Contract-to-hire (conversion is the goal)

About the Role

Our client, a large St. Louis-area enterprise, is adding a Senior DevSecOps Platform Engineer to the team that owns its enterprise DevSecOps toolchain, supporting the full software development lifecycle for 300+ developers. This is a dual-mandate role. You will get productive quickly on the existing self-hosted toolchain on AWS EKS and carry real operational load, then help drive the consolidation and migration to a SaaS-based toolchain (GitHub Enterprise Cloud, GitHub Actions, and Atlassian Cloud) planned to begin later this year.

Must-Haves

• AWS cloud
• Terraform
• Python scripting

Current Environment: GitHub Enterprise Server, CloudBees CI (Jenkins) on EKS, JFrog Artifactory & Xray, SonarQube, Jira/Confluence Data Center on EKS; AWS (EKS, EC2, ECS, VPC, IAM, S3, Route 53, KMS, EFS, RDS); Terraform; Helm; Docker; Prometheus/Grafana; Azure AD/SSO

Target Environment: GitHub Enterprise Cloud (EMU) with Azure AD federation and SCIM; GitHub Actions replacing CloudBees CI; Actions Runner Controller (ARC) self-hosted runners on EKS; repository migration at scale via GitHub Enterprise Importer; consolidated code security scanning; Atlassian Cloud

What You’ll Do

Operate and support the current platform

• Provide ongoing production and operational support to internal teams; resolve incidents, tickets, and operational requests
• Administer CloudBees CI on EKS and GitHub Enterprise Server – lifecycle, upgrades, access governance, patching, and build troubleshooting
• Operate Artifactory, Xray, and SonarQube and support their integrations
• Maintain and extend Terraform infrastructure code through PR-based pipeline workflows
• Manage Kubernetes workloads on EKS – Helm releases, storage, scaling, and troubleshooting
• Resolve production issues across compute, storage, networking, identity, and certificate layers
• Drive vulnerability remediation and patch cadence; write runbooks and documentation
• Onboard new teams to platform standards and help them adopt CI/CD pipelines, GitHub, and related tooling
• Partner with Application Security and Cybersecurity to keep security policies, standards, and compliance requirements in place

Drive consolidation and migration

• Build and operate ARC self-hosted runners on EKS, including hardening and private VPC connectivity
• Convert Jenkins shared-library pipelines to GitHub Actions reusable workflows
• Plan and execute phased repository migration waves with validation and rollback
• Configure enterprise identity, SSO/SCIM, and access governance in the target platform
• Support developer onboarding and enablement; contribute to decommissioning plans

Required Qualifications

• 7+ years in DevOps, DevSecOps, or platform engineering
• Hands-on administration of an enterprise CI platform (Jenkins/CloudBees preferred) and pipeline development using shared/reusable libraries
• Practical GitHub Actions experience - workflows, reusable workflows, runners, secrets
• Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes
• Terraform at production scale - modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker
• Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates
• Core systems fundamentals: Linux administration; networking (TCP/IP, DNS, routing, firewalls, load balancing, proxies, VPN/Transit Gateway, packet-level diagnostics); certificates and TLS (PKI, issuance/renewal, truststores, mTLS); identity (LDAP, Azure AD, SAML/OIDC, SSO, SCIM, RBAC)
• Scripting in Python, Bash, and Groovy
• Works independently with broad ownership, documents well, and participates in an on-call rotation

Preferred Qualifications

• GHES -> GitHub Enterprise Cloud/EMU migration or Jenkins -> GitHub Actions conversion at enterprise scale
• GitHub Enterprise Importer (GEI) and Actions Runner Controller (ARC) production experience
• Artifactory/Xray, SonarQube, or Atlassian Cloud migration experience
• AWS certification (DevOps Engineer – Professional or Solutions Architect)
• Experience in a regulated enterprise with formal change management