Remote DevSecOps Lead & Architect

Dynanet Corporation

Maryland

Remote

USD 150,000 - 210,000

Full time

2 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Remote Work*

Medical and Dental Insurance

Paid Time Off/Holidays

401(k) Retirement Plans with Matching

Paid Training

Employee Referral Program

Employee Development Program?

Job summary

Dynanet Corporation is seeking a DevOps Lead/Architect to serve as designated Key Personnel on a federal health agency program delivering enterprise DevSecOps platform services. You will own the technical architecture, security posture, and IaC standards across a multi-account AWS environment, partnering with client security and QA teams.

Responsibilities include defining Terraform modules, enforcing policy-as-code, maintaining AoO, implementing GitOps for Kubernetes, managing artifact

Qualifications

Bachelor's degree in Computer Science, Engineering, Information Systems, or a related technical discipline.
Minimum of ten (10) years of infrastructure, DevOps, or cloud engineering experience, including at least four (4) years in an architecture or technical lead capacity.
Minimum of three (3) years supporting federal systems subject to FISMA and Authority to Operate requirements.
Candidates must provide a resume suitable for submission as designated Key Personnel.

Responsibilities

Own the architecture of all managed DevSecOps platforms, establishing a uniform operating pattern for provisioning, identity, backup and restore, observability, and security across every managed tool.
Define and maintain the Infrastructure as Code standard using Terraform, including a versioned, peer-reviewed module catalog designed for consumption by delivery teams, with drift detection and remediation.
Implement policy-as-code preventive controls on infrastructure and Kubernetes manifests, and apply GitOps workflows for declarative environment management of Kubernetes-based services.
Maintain continuous Authority to Operate for the platform boundary by inheriting and sustaining the existing security posture, maintaining security documentation in the client's designated compliance repository and supporting automated compliance narrative and inventory generation.
Implement compliance-as-code and documentation-as-code practices so that control evidence, scan results, configuration baselines, and software bills of materials are produced continuously by the pipeline rather than assembled ahead of assessment.
Support automated security control assessment processes, security impact analyses, and penetration testing, maintaining the system security plan, risk assessment, contingency plan, and plan of action and milestones on the cadence the client directs.
Operate and maintain the artifact repository and binary analysis platform, including project-level repository segregation, retention and quota policy, scan policies and watches aligned to OWASP, CVE, and CWE frameworks, and remediation workflows with SLA tracking.
Define the observability architecture spanning application performance monitoring, centralized log aggregation, OpenTelemetry instrumentation, and a metrics and dashboarding layer serving as the correlation and reporting surface.
Establish Site Reliability Engineering practice across the platform estate, including service level indicators and objectives, error budgets that govern release velocity, toil reduction, and capacity planning tied to SLOs.
Design and maintain the disaster recovery playbook including failover and failback procedures, automated recovery drills, and documented and validated recovery time and recovery point objectives.
Implement Zero Trust alignment across the platform estate, including network segmentation, identity-aware access, least-privilege role design, and secrets management with rotation through AWS Secrets Manager, Parameter Store, or equivalent.
Lead FinOps and cost optimization practice, including tagging standards, rightsizing, discounted pricing coverage, non-production auto-scheduling, anomaly detection, and recurring cost reporting by service, workload, environment, and system boundary.
Maintain architecture documentation as code, including architecture decision records, C4 model diagrams, and API contracts in version control, and evaluate and recommend architecture visualization tooling.
Serve as the technical interface to the independent quality assurance contractor under the applicable joint operating agreement, providing timely access to platform configurations, environments, and documentation, and promptly sharing security findings with the client and its security officers.
Participate in a 24x7x365 on-call rotation and lead quarterly resilience and security exercise events.