Senior DevSecOps Platform Engineer - W2

Envision; St. Louis (MO); Hybrid; USD 140,000 - 190,000; Part time

Job summary

Envision seeks a Senior DevSecOps Platform Engineer in a hybrid, contract-to-hire capacity to support an enterprise DevSecOps platform for 300+ developers in the St. Louis area.

The role emphasizes hands-on work across AWS (EKS, EC2, VPC, IAM, S3), Terraform, Python, Kubernetes, Docker, Helm, Jenkins/CloudBees, and GitHub Actions, with platform migration and modernization tasks.

Qualifications

• Bachelor's degree required.
• 7+ years of experience in DevOps, DevSecOps, Platform Engineering, or related roles.
• Strong hands-on experience with AWS Cloud, including EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS.
• Strong scripting experience with Python; Terraform expertise; Kubernetes on AWS EKS; Docker and Helm.
• Experience administering enterprise CI/CD platforms such as Jenkins or CloudBees CI, and GitHub Actions.

Responsibilities

• Support and maintain enterprise DevSecOps platforms and tooling.
• Investigate and resolve production incidents and platform issues.
• Administer and support CI/CD platforms including Jenkins and CloudBees CI.
• Support GitHub Enterprise Server and development teams using GitHub and CI/CD tools.
• Maintain and enhance Terraform infrastructure and workflows.
• Manage Kubernetes workloads on AWS EKS, including Helm deployments and scaling.
• Support AWS infrastructure across core services (compute, networking, storage, IAM, S3).
• Drive vulnerability remediation, patching, and security improvements.
• Create and maintain technical runbooks and documentation.

Skills

AWS Cloud

Terraform

Python

Kubernetes / EKS

GitHub Actions

CI/CD platforms

Jenkins

Docker

Helm

Education

Bachelor's degree

Tools

Jenkins

CloudBees CI

GitHub Enterprise Server

GitHub Actions runners

AWS EKS tooling

Job description

Work Arrangement: Hybrid - 3 days onsite per week (Wednesday-Friday preferred)

Employment Type: Contract / Contract-to-Hire

Interview Process: 1-hour Microsoft Teams interview

Position Overview

We are seeking an experienced Senior DevSecOps Platform Engineer to join an Enterprise DevSecOps Platform team supporting the software development lifecycle for more than 300 developers.

This role requires a hands-on engineer who can quickly become productive supporting an existing enterprise DevSecOps platform while contributing to upcoming platform consolidation and migration initiatives. The ideal candidate will have strong experience with AWS, Terraform, Python, Kubernetes/EKS, CI/CD platforms, and GitHub Actions.

Key Responsibilities

Platform Operations & Support

• Support and maintain enterprise DevSecOps platforms and development tooling.
• Investigate and resolve production incidents, operational requests, and platform issues.
• Administer and support CI/CD platforms, including Jenkins and CloudBees CI.
• Support GitHub Enterprise Server and development teams using GitHub and CI/CD tools.
• Maintain and enhance Terraform infrastructure through PR-based deployment workflows.
• Manage Kubernetes workloads on AWS EKS, including Helm deployments, scaling, storage, and troubleshooting.
• Support AWS infrastructure across compute, networking, storage, identity, and security services.
• Drive vulnerability remediation, patching, and platform security improvements.
• Create and maintain technical documentation and operational runbooks.

Platform Migration & Modernization

• Support the migration from GitHub Enterprise Server to GitHub Enterprise Cloud.
• Assist with the transition from Jenkins/CloudBees CI to GitHub Actions.
• Build and support self-hosted GitHub Actions runners on AWS EKS.
• Convert existing CI/CD pipelines into reusable GitHub Actions workflows.
• Support repository migration, validation, testing, and rollback planning.
• Assist with platform consolidation and SaaS migration initiatives.
• Support developer onboarding and adoption of new DevSecOps tools and standards.

Required Qualifications

• Bachelor's degree required.
• 7+ years of experience in DevOps, DevSecOps, Platform Engineering, or related roles.
• Strong hands-on experience with AWS Cloud, including:
• EKS
• EC2
• VPC
• IAM
• S3
• Route 53
• KMS
• EFS
• Strong production experience with Terraform, including modules, state management, multi-environment deployments, and automated pipeline workflows.
• Strong scripting experience with Python.
• Hands-on experience with Kubernetes and AWS EKS.
• Experience with Docker and Helm.
• Experience administering enterprise CI/CD platforms such as Jenkins or CloudBees CI.
• Hands-on experience with GitHub Actions, including workflows, reusable workflows, runners, and secrets management.
• Strong Linux administration and troubleshooting skills.
• Experience with DevSecOps and pipeline security tools, including SAST, SCA, SBOM, container scanning, and quality gates.
• Knowledge of networking, including TCP/IP, DNS, routing, firewalls, load balancing, proxies, and VPN connectivity.
• Experience with identity and access management technologies, including Azure AD, SSO, SAML, OIDC, SCIM, LDAP, and RBAC.
• Experience with Bash and Groovy scripting is preferred.
• Strong troubleshooting, documentation, and communication skills.
• Ability to work independently and participate in an on-call rotation.

Preferred Qualifications

• Experience migrating GitHub Enterprise Server to GitHub Enterprise Cloud.
• Experience converting Jenkins or CloudBees pipelines to GitHub Actions.
• Experience with GitHub Enterprise Importer (GEI).
• Experience with Actions Runner Controller (ARC).
• Experience with JFrog Artifactory and Xray.
• Experience with SonarQube and code quality/security tools.
• Experience with Atlassian Cloud migration.
• AWS certifications, particularly:
• AWS Solutions Architect
• Experience working in a large or regulated enterprise environment with formal change management processes.