Remote Cloud DevSecOps Engineer - Kubernetes & IAM

ecsfederal; Virginia (MN); Remote; USD 130,000 - 175,000; Full time

Job summary

ECS Federal is seeking a Senior Cloud DevSecOps Engineer for a remote role. You will design and operate production-grade Kubernetes clusters, secure identity services with Keycloak federated to Okta, and build automated CI/CD pipelines with security in mind.

Responsibilities include IaC with Terraform and Helm, secret management, and strong observability using Prometheus, Grafana, and Loki. US citizenship and a public trust are required.

Qualifications

• Bachelor's degree in a relevant field.
• 10+ years of related work experience.
• 6+ years in systems engineering, DevOps, and cloud infrastructure.
• 4+ years provisioning production Kubernetes clusters.
• 3+ years IAM experience with Keycloak and Okta (OIDC/SAML).
• Strong CI/CD experience and security scanning.
• IaC with Terraform, Helm, and Kubernetes manifests.
• Solid networking, TLS, and cloud network policies.
• Strong scripting in Bash, Python, or Go.

Responsibilities

• Architect, provision, and maintain production-grade Kubernetes clusters.
• Deploy and manage a highly available Keycloak in Kubernetes federated to Okta.
• Configure identity brokering rules, realm roles, and token policies.
• Design, build, and maintain end-to-end CI/CD pipelines with automated tests.
• Implement platform security controls including Ingress, TLS, and image scanning.
• Automate secrets management with Vault / AWS Secrets / Kubernetes External Secrets.
• Provision and manage PostgreSQL and S3 storage infrastructure.
• Establish centralized logging, monitoring, and alerting for observability.

Skills

Kubernetes

DevSecOps

IAM

CI/CD

Security tooling

Scripting

Education

Bachelor's degree

Tools

Docker

Helm

Keycloak

Okta

Terraform

GitLab CI

GitHub Actions

Jenkins

Trivy

cert-manager

Job description

ECS Federal is seeking a Senior Cloud DevSecOps Engineer for a remote role. You will design and operate production-grade Kubernetes clusters, secure identity services with Keycloak federated to Okta, and build automated CI/CD pipelines with security in mind.

Responsibilities include IaC with Terraform and Helm, secret management, and strong observability using Prometheus, Grafana, and Loki. US citizenship and a public trust are required.