Senior DevOps Engineer

Applied Research Solutions; Beavercreek Township (OH); On-site; USD 100,000 - 140,000; Full time

Job summary

Applied Research Solutions is seeking a Senior DevOps Engineer to design and sustain a secure DevSecOps platform for government in Azure. You will build CI/CD pipelines, manage Azure infrastructure, and ensure compliance with security standards while working under a Chief Architect.

This hands-on role requires deep experience with Terraform and Bicep for infrastructure automation and CI/CD lifecycle management. Applicants must be U.S. citizens and able to obtain a Secret clearance.

Qualifications

• 8+ years of demonstrated performance in related technology.
• Hands-on experience deploying Microsoft infrastructure using Terraform or Bicep.
• Active Security+ Certification (or equivalent DoD certification).

Responsibilities

• Design, deploy, and operate Azure infrastructure using IaC for scalable environments.
• Build and maintain Azure Pipelines for automating provisioning of VMs and services.
• Ensure security compliance and integrate IAM via AD/Entra ID.

Skills

Azure infrastructure management

DevSecOps automation

Infrastructure as Code (IaC)

CI/CD pipeline optimization

Security compliance

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

Terraform

Bicep

Azure DevOps

Kubernetes

Job description

ARS is seeking an experienced Senior DevOps Engineer to design, deploy, and sustain a DevSecOps platform-as-a-service for a U.S. Government customer within an Azure environment. This role is responsible for building and optimizing CI/CD pipelines in cloud settings, managing Azure infrastructure via Infrastructure as Code (IaC), and supporting automation of customer development desktops and enterprise workloads. The Senior DevOps Engineer will enforce security compliance, support customer onboarding, and provide Tier 3 operational support. This position requires the ability to obtain a Secret clearance.

The Senior DevOps Engineer is a highly specialized technical role operating at the intersection of cloud infrastructure, DevSecOps automation, and government compliance. This position requires an engineer with deep hands‑on experience deploying and maintaining complex Azure infrastructure.

This engineer will own the full infrastructure automation lifecycle using Bicep and Terraform, build and maintain golden image pipelines, and ensure all environments adhere to DoD security standards including STIG/SCAP, WSUS patching, and vulnerability management via Nessus Security Center. Critically, this is a hands‑on engineering role, not an architecture or governance position. Candidates must be able to write and deploy production‑grade IaC, build pipelines end‑to‑end, and operate confidently in restricted, offline environments.

The engineer will work under the technical direction of a Chief Architect and collaborate closely with onsite and remote teams to validate configurations, onboard customers, and ensure handoff readiness. Strong documentation practices in Confluence and comfort navigating government change management processes are essential.

Responsibilities

DevOps

• Design, deploy, and operate Azure infrastructure using IaC (Bicep/Terraform) for repeatable, scalable environments.
• Build and maintain Azure Pipelines to automate provisioning of VMs, Key Vault, networking, and platform services.
• Enforce GitOps‑based baselines for versioned, traceable, consistent configuration across environments.
• Create and maintain golden image pipelines using Packer (images‑as‑code) to support enterprise workloads.
• Ensure security compliance (CMKs, encryption, approved baselines) and integrate IAM via AD/Entra ID (federation/SSO such as Keycloak).

Security & Compliance

• Operate and maintain secure enterprise environments in alignment with DoD security standards, utilizing vulnerability management tools.
• Ensure all virtual machines and platform resources are properly configured to send telemetry and logs to a centralized Azure Log Analytics workspace.
• Perform enterprise‑scale patching and update management using WSUS or equivalent update management solutions.
• Participate in change management and review boards, supporting boundary changes and ensuring compliance with enterprise governance processes.

Customer Onboarding & Operations

• Tailor infrastructure parameter templates to customer workload and hardware requirements.
• Deploy Azure infrastructure via established CI/CD pipelines into enterprise environments.
• Document customer configurations and operational details in Confluence.
• Coordinate with onsite and remote teams to validate configurations and ensure handoff readiness.
• Provide Tier 1 operational support, including automated baseline desktop and software installs (DSC, Packer).

Automation & Container Enablement

• Develop and maintain automation solutions using Bicep and/or Terraform to minimize manual intervention and improve deployment reliability.
• Support container image movement and lifecycle management using tools such as Skopeo, Crane, and Podman, ensuring secure and repeatable container workflows.
• Architect, develop, automate, deploy, and manage AKS‑based applications to support developers.
• Other duties as assigned.

Required Qualifications

• Must be a U.S. citizen.
• Active Security+ Certification (or equivalent DoD 8570 IAT Level II certification).
• Ability to obtain a Secret clearance.
• 8+ years of demonstrated performance in related technology.
• Hands‑on experience deploying Microsoft infrastructure using Terraform or Bicep.
• Bachelor's degree in Computer Science, Engineering, or related field AND 3+ years of technical leadership experience or equivalent experience.

Preferred Qualifications

• 5+ years of leadership experience in a relevant technical area.
• Technical certifications in Azure (e.g., Azure Solutions Architect, Azure DevOps Engineer Expert).
• Experience working in regulated, compliance‑driven, or DoD government environments.
• Familiarity with DoD Risk Management Framework (RMF) and ATO processes.
• Experience with Kubernetes and AKS in production environments.
• Experience with Packer, Skopeo, Crane, or Podman in enterprise container workflows.
• Familiarity with Keycloak or Entra ID federation/SSO in classified environments.

Key Differentiators for Success

• Proven ability to personally write and deploy production‑grade IaC, not just govern or review it.
• Demonstrated experience operating in SCIFs or air‑gapped environments where internet access is unavailable.
• Comfort with the full CI/CD lifecycle from code commit through production deployment in classified settings.
• Strong documentation discipline and ability to support government change management and ATO processes.
• Adaptability to work within a technically diverse team under the direction of a Microsoft Architect.

All positions at Applied Research Solutions are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check.

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability, and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-300.5(a). This regulation prohibits discrimination against qualified protected veterans, and requires affirmative action by covered contractors and subcontractors to employ and advance in employment qualified protected veterans.