Senior DevSecOps / Platform Engineer - Clearance Required

LMI Consulting, LLC; United States; On-site; USD 125,000 - 175,000; Full time

Job summary

LMI is seeking a Senior DevSecOps / Platform Engineer to design, deploy, and support a Platform-as-a-Service that runs containerized apps across hybrid and multi‑cloud environments. You will collaborate with Navy users, developers, and security teams to ensure stability, security, and speed in mission-critical systems.

Responsibilities include building GitLab pipelines, migrating from BitBucket, provisioning infrastructure with Terraform and Ansible across AWS GovCloud, and driving Kubernetes

Qualifications

• Active Secret clearance and DoD 8570/8140 baseline certifications (e.g., Security+ CE).
• 5+ years as a DevSecOps/Platform Engineer in DoD/federal or regulated environments.
• Significant cloud infra experience with AWS GovCloud and hybrid clouds.
• Hands-on Kubernetes administration and Helm chart development (CKAD/CKA preferred).
• RHEL system administration and scripting for automated hardening.
• Advanced pipelines in GitLab; migrations from BitBucket to GitLab.

Responsibilities

• Architect, build, and maintain GitLab CI/CD pipelines for deployment.
• Assist migration of legacy repos/workflows from BitBucket to GitLab.
• Design, deploy, and manage infrastructure across AWS GovCloud, edge, and Navy networks using Terraform, Ansible, and GitLab.
• Drive containerization and orchestration for mission-critical apps with Kubernetes.
• Develop Helm charts and ensure cluster resilience with Velero backups and recovery testing.
• Automate security: RHEL image hardening and automated STIG checklists.
• Integrate automated security scanning into pipelines to maintain ATO and ICAM.
• Establish continuous monitoring, alerting, and reporting with Prometheus/Grafana.
• Oversee secrets management and automated key rotations.

Skills

Secret clearance

DoD 8570/8140 baseline certifications

5+ years experience

AWS GovCloud

Kubernetes

Helm

CKAD/CKA preferred

RHEL

Scripting

ICAM (SAML, OAuth2, OIDC)

Python

Automation

Security-first mindset

Tools

GitLab

Bitbucket

Job description

Senior DevSecOps / Platform Engineer - Clearance Required

Job Locations: US-Remote

Job ID: 2026-13853 | Openings: 1 | Benefit Type: Salaried High Fringe/Full-Time

Overview

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors‑helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

The Opportunity

We're looking for a Senior DevSecOps / Platform Engineer with significant experience in AWS to help us build and support the core infrastructure that powers our Navy logistics and asset visibility platform. You'll help design, deploy, and maintain a Platform-as-a-Service (PaaS) environment that runs containerized apps across hybrid and multi-cloud environments. You'll work closely with developers, DevSecOps engineers, and Navy users to ensure stability, security, and speed.

Remote (U.S. Based) | Some Travel Required

Responsibilities

What You'll Do

• CI/CD & Pipeline Engineering: Architect, build, and maintain robust GitLab Pipelines for seamless application deployment.
• Migration Support: Play a key role in assisting the Platform team with the migration of legacy repositories and workflows from BitBucket to GitLab.
• Infrastructure Provisioning: Design, deploy, and manage the infrastructure behind our apps across AWS GovCloud, edge, and Navy networks using Terraform, Ansible, and GitLab.
• Containerization & Orchestration: Drive containerization efforts for mission-critical applications (NADACS, SPECTR, etc.) and manage Kubernetes.
• Resilience & Recovery: Develop and maintain Helm Charts for deployments and ensure cluster resilience through automated Kubernetes backups and recovery testing (e.g., Velero).
• Security & Compliance Automation: Engineer automated processes for RHEL image hardening and execute automated STIG checklists.
• ATO Integration: Integrate continuous, automated security scanning directly into pipelines to maintain Authority to Operate (ATO) status and support ICAM integration.
• Platform Operations: Establish comprehensive continuous monitoring, alerting, and reporting mechanisms (e.g., Prometheus/Grafana) across the platform.
• Secrets Management: Oversee cryptographic lifecycles through rigorous secrets management and automated key rotations.

Qualifications

What We're Looking For

• Clearance & Certification: Active Secret clearance or higher (required) and meet DoD 8570/8140 baseline certifications (e.g., CompTIA Security+ CE).
• Experience Level: 5+ years of experience (Mid-to-senior level) functioning as a DevSecOps or Platform Engineer, specifically within DoD, federal, or highly regulated environments.
• Cloud Expertise: Significant experience deploying and managing cloud infrastructure using AWS GovCloud and hybrid cloud environments.
• Orchestration: Hands‑on Kubernetes administration and custom Helm chart development (CKAD or CKA preferred).
• Operating Systems: Strong background in RHEL system administration and scripting automated system/container hardening.
• Tools: Advanced proficiency building pipelines natively in GitLab, with experience handling migrations from BitBucket.
• Core Competencies: An automation-centric approach to eliminate manual toil and a security-first mindset that treats security as a foundational element.
• Technical Breadth: Knowledge of secure identity and access management (ICAM) protocols (SAML, OAuth2, OIDC) and proficiency in at least one language (e.g., Python).

Bonus Points For:

• Master's degree in Computer Science or a related field.
• Prior experience with U.S. Navy programs or command and control platforms.
• Experience securing or operating IL5+ environments.
• AWS Certification (Solutions Architect or Developer Associate).

Target salary range: $125,000 - 175,000

Disclaimer: The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.

#LI-SH1

Applicants must meet eligibility requirements for a U.S. Government security clearance. Only US Citizens are eligible for a security clearance. For this position, LMI will only consider applicants with security clearances or applicants who are eligible for security clearances, due to the nature of the work.

LMI is an Equal Opportunity Employer

LMI is committed to the fair treatment of all and to our policy of providing applicants and employees with equal employment opportunities. LMI recruits, hires, trains, and promotes people without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, disability, age, protected veteran status, citizenship status, genetic information, or any other characteristic protected by applicable federal, state, or local law. If you are a person with a disability needing assistance with the application process, please contact [e-mail]

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.