Senior DevSecOps / Platform Engineer - Clearance Required

LMI; United States; Remote; USD 125,000 - 175,000; Full time

Benefits offered by this job

Security clearance eligible

Job summary

LMI is seeking a Senior DevSecOps / Platform Engineer to design, deploy, and maintain a Platform-as-a-Service environment for Navy logistics and asset visibility across hybrid and multi-cloud setups. You will collaborate with developers, DevSecOps engineers, and Navy users to ensure stability, security, and speed in a defense-domain platform. Remote (U.S.

Based) with some travel. The role emphasizes automation, security-first thinking, and hands-on cloud and container orchestration expertise in

Qualifications

• Active Secret clearance or higher (required) and meet DoD 8570/8140 baseline certifications (e.g., CompTIA Security+ CE).
• 5+ years of experience as a DevSecOps or Platform Engineer in DoD, federal, or highly regulated environments.
• Significant experience deploying and managing cloud infrastructure using AWS GovCloud and hybrid cloud environments.
• Hands-on Kubernetes administration and custom Helm chart development (CKAD or CKA preferred).
• Strong background in RHEL system administration and scripting automated system/container hardening.
• Advanced proficiency building pipelines in GitLab, with migration experience from BitBucket.
• Security-first mindset and automation-centric approach to eliminate manual toil.
• Knowledge of ICAM protocols (SAML, OAuth2, OIDC) and Python or similar language.

Responsibilities

• Architect, build, and maintain GitLab-based CI/CD pipelines for deployment of containerized apps.
• Assist Platform team with migration of legacy repositories/workflows from Bitbucket to GitLab.
• Design, deploy, and manage infrastructure across AWS GovCloud, edge, and Navy networks using Terraform and Ansible.
• Drive containerization and orchestration for mission-critical apps and manage Kubernetes clusters.
• Develop Helm charts and ensure cluster resilience with automated backups and recovery testing (Velero).
• Engineer automated security scanning integrated into pipelines to maintain ATO status and ICAM integration.

Skills

AWS GovCloud

Kubernetes

GitLab CI/CD

Terraform

Ansible

Security focus

ICAM

Python

Bitbucket migration

Tools

GitLab

Terraform

Ansible

Kubernetes

Helm

Velero

Job description

Overview

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors- helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

The Opportunity

We're looking for a Senior DevSecOps / Platform Engineer with significant experience in AWS to help us build and support the core infrastructure that powers our Navy logistics and asset visibility platform. You'll help design, deploy, and maintain a Platform-as-a-Service (PaaS) environment that runs containerized apps across hybrid and multi-cloud environments. You'll work closely with developers, DevSecOps engineers, and Navy users to ensure stability, security, and speed.

Remote (U.S. Based) | Some Travel Required

Responsibilities

• CI/CD & Pipeline Engineering: Architect, build, and maintain robust GitLab Pipelines for seamless application deployment.
• Migration Support: Play a key role in assisting the Platform team with the migration of legacy repositories and workflows from BitBucket to GitLab.
• Infrastructure Provisioning: Design, deploy, and manage the infrastructure behind our apps- across AWS GovCloud, edge, and Navy networks using Terraform, Ansible, and GitLab.
• Containerization & Orchestration: Drive containerization efforts for mission-critical applications (NADACS, SPECTR, etc.) and manage Kubernetes
• Resilience & Recovery: Develop and maintain Helm Charts for deployments and ensure cluster resilience through automated Kubernetes backups and recovery testing (e.g., Velero).
• Security & Compliance Automation: Engineer automated processes for RHEL image hardening and execute automated STIG checklists.
• ATO Integration: Integrate continuous, automated security scanning directly into pipelines to maintain Authority to Operate (ATO) status and support ICAM integration.
• Platform Operations: Establish comprehensive continuous monitoring, alerting, and reporting mechanisms (e.g., Prometheus/Grafana) across the platform.
• Secrets Management: Oversee cryptographic lifecycles through rigorous secrets management and automated key rotations.

Qualifications

• Clearance & Certification: Active Secret clearance or higher (required) and meet DoD 8570/8140 baseline certifications (e.g., CompTIA Security+ CE).
• Experience Level: 5+ years of experience (Mid-to-senior level) functioning as a DevSecOps or Platform Engineer, specifically within DoD, federal, or highly regulated environments.
• Cloud Expertise: Significant experience deploying and managing cloud infrastructure using AWS GovCloud and hybrid cloud environments.
• Orchestration: Hands-on Kubernetes administration and custom Helm chart development (CKAD or CKA preferred).
• Operating Systems: Strong background in RHEL system administration and scripting automated system/container hardening.
• Tools: Advanced proficiency building pipelines natively in GitLab, with experience handling migrations from BitBucket.
• Core Competencies: An automation-centric approach to eliminate manual toil and a security-first mindset that treats security as a foundational element.
• Technical Breadth: Knowledge of secure identity and access management (ICAM) protocols (SAML, OAuth2, OIDC) and proficiency in at least one language (e.g., Python).

Bonus Points For

• Master's degree in Computer Science or a related field.
• Prior experience with U.S. Navy programs or command and control platforms.
• Experience securing or operating IL5+ environments.
• AWS Certification (Solutions Architect or Developer Associate).

Target salary range: $125,000 - 175,000

Disclaimer: The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.

Applicants must meet eligibility requirements for a U.S. Government security clearance. Only US Citizens are eligible for a security clearance. For this position, LMI will only consider applicants with security clearances or applicants who are eligible for security clearances, due to the nature of the work.

Job Locations

US-Remote