DevSecOps Platform Engineer - AWS EKS & GitHub Actions

ZipStaff Inc.

St. Louis (MO)

On-site

USD 96,000 - 165,000

Full time

3 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

ZipStaff Inc. is seeking an experienced Enterprise DevSecOps Platform Engineer to join the enterprise platform team in St. Louis, MO on-site.

The role will administer the current self-hosted AWS EKS toolchain, manage Jenkins/CloudBees, Artifactory, Xray and SonarQube, and drive consolidation toward a SaaS-based platform while handling production incidents and on-call rotation. The candidate will lead Terraform-based infrastructure, Helm/Kubernetes operations, and implement secure pipelines with

Qualifications

7+ years in DevOps/DevSecOps or platform engineering.
Hands-on administration of an enterprise CI platform (Jenkins/CloudBees preferred) and pipeline development using shared/reusable libraries.
Practical GitHub Actions experience - workflows, reusable workflows, runners, secrets.
Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes.
Terraform at production scale - modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker.
Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates.
Linux administration and troubleshooting; Networking, TLS, Identity, RBAC; On-site work in St. Louis, MO.

Responsibilities

Operate the Current Platform: Administer CloudBees CI on EKS and GitHub Enterprise Server; lifecycle, upgrades, access governance, patching, and build troubleshooting.
Operate Artifactory, Xray, and SonarQube; support integrations.
Maintain and extend Terraform infrastructure through PR-based pipeline workflows.
Manage Kubernetes workloads on EKS - Helm releases, storage, scaling, troubleshooting.
Resolve production incidents across compute, storage, networking, identity, and certificates.
Drive vulnerability remediation and patch cadence; produce runbooks and documentation.