Enterprise DevSecOps Platform Engineer

ZipStaff Inc.; St. Louis (MO); On-site; USD 96,000 - 165,000; Full time

Job summary

ZipStaff Inc. is seeking an experienced Enterprise DevSecOps Platform Engineer to join the enterprise platform team in St. Louis, MO on-site.

The role will administer the current self-hosted AWS EKS toolchain, manage Jenkins/CloudBees, Artifactory, Xray and SonarQube, and drive consolidation toward a SaaS-based platform while handling production incidents and on-call rotation. The candidate will lead Terraform-based infrastructure, Helm/Kubernetes operations, and implement secure pipelines with

Qualifications

• 7+ years in DevOps/DevSecOps or platform engineering.
• Hands-on administration of an enterprise CI platform (Jenkins/CloudBees preferred) and pipeline development using shared/reusable libraries.
• Practical GitHub Actions experience - workflows, reusable workflows, runners, secrets.
• Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes.
• Terraform at production scale - modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker.
• Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates.
• Linux administration and troubleshooting; Networking, TLS, Identity, RBAC; On-site work in St. Louis, MO.

Responsibilities

• Operate the Current Platform: Administer CloudBees CI on EKS and GitHub Enterprise Server; lifecycle, upgrades, access governance, patching, and build troubleshooting.
• Operate Artifactory, Xray, and SonarQube; support integrations.
• Maintain and extend Terraform infrastructure through PR-based pipeline workflows.
• Manage Kubernetes workloads on EKS - Helm releases, storage, scaling, troubleshooting.
• Resolve production incidents across compute, storage, networking, identity, and certificates.
• Drive vulnerability remediation and patch cadence; produce runbooks and documentation.

Skills

DevOps experience

DevSecOps

Platform engineering

Jenkins/CloudBees

GitHub Actions

AWS (EKS)

Terraform

Kubernetes (EKS)

SAST/SCA/SBOM

TLS/PKI

Education

Bachelor's degree

Tools

Jenkins/CloudBees

GitHub Enterprise Server

Artifactory

Xray

SonarQube

Terraform

Helm

Docker

Kubernetes

ARC

GEI

GitHub Actions

Job description

Job Title: Enterprise DevSecOps Platform Engineer

Location: St. Louis, MO (On-site)

Employment Type: Contract (W2 through ZipStaff - No C2C or 1099)

About the Opportunity:

ZipStaff is seeking an experienced DevSecOps Platform Engineer to join the enterprise DevSecOps platform team at a major regulated utility organization in St. Louis, MO.

This team owns the toolchain that supports the full software development lifecycle for 300+ developers. The role has a dual mandate: become productive quickly on the current self-hosted AWS EKS toolchain and carry real operational load, while also contributing to consolidation and migration to a SaaS-based toolchain.

What You’ll Do:

Operate the Current Platform:

• Administer CloudBees CI on EKS and GitHub Enterprise Server - lifecycle, upgrades, access governance, patching, and build troubleshooting.
• Operate Artifactory, Xray, and SonarQube; support integrations.
• Maintain and extend Terraform infrastructure through PR-based pipeline workflows.
• Manage Kubernetes workloads on EKS - Helm releases, storage, scaling, troubleshooting.
• Resolve production incidents across compute, storage, networking, identity, and certificates.
• Drive vulnerability remediation and patch cadence; produce runbooks and documentation.

Drive Consolidation and Migration:

• Build and operate Actions Runner Controller (ARC) self-hosted runners on EKS, including hardening and private VPC connectivity.
• Convert Jenkins shared-library pipelines to GitHub Actions reusable workflows.
• Plan and execute phased repository migration waves, with validation and rollback.
• Configure enterprise identity, SSO/SCIM, and access governance in the target platform.
• Support developer onboarding and enablement; contribute to decommissioning plans.

Required Qualifications:

• Bachelor's degree required.
• 7+ years in DevOps / DevSecOps / platform engineering.
• Hands-on administration of an enterprise CI platform (Jenkins / CloudBees preferred) and pipeline development using shared/reusable libraries.
• Practical GitHub Actions experience - workflows, reusable workflows, runners, secrets.
• Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes.
• Terraform at production scale - modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker.
• Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates.
• Non-negotiable systems fundamentals:
  • Linux administration and troubleshooting.
  • Networking (TCP/IP, DNS, routing, firewalls, load balancing, proxies, VPN/Transit Gateway, packet-level diagnostics).
  • Certificates and TLS (PKI, issuance/renewal, truststores, mTLS).
  • Identity (LDAP, Azure AD / SAML / OIDC, SSO, SCIM, RBAC).
• Scripting in Python, Bash, and Groovy.
• Ability to work independently with broad ownership, strong documentation discipline, and participation in an on-call rotation.
• Ability to work on-site in St. Louis, MO.
• Must be legally authorized to work in the United States without sponsorship now or in the future.

Preferred Qualifications:

• Prior GHES to GitHub Enterprise Cloud / EMU migration or Jenkins to GitHub Actions conversion at enterprise scale.
• Production experience with GitHub Enterprise Importer (GEI) and Actions Runner Controller (ARC).
• Artifactory/Xray, SonarQube, or Atlassian Cloud migration experience.
• AWS certification (DevOps Engineer – Professional or Solutions Architect).
• Experience in a regulated enterprise with formal change management.

About ZipStaff:

ZipStaff partners with leading organizations to connect skilled technology professionals with high-impact contract opportunities. We focus on quality matches and long-term success.