DevOps Engineer

• Location: Washington, DC (3 days/week on-site).

Responsibilities:

Cloud Infrastructure & Automation

• Deploy, configure, and maintain Azure resources supporting unclassified and classified spectrum management systems.
• Create and update Infrastructure as Code using established patterns and tools such as Terraform, Bicep, or ARM templates.
• Build and maintain Docker images and support container deployments using Kubernetes and Helm.
• Configure networking, access controls, and environment settings in coordination with senior engineers and security personnel.

CI/CD & Secure Software Delivery

• Develop and maintain Azure DevOps pipelines that automate application builds, testing, and deployments.
• Integrate and maintain code, dependency, container image, and infrastructure security checks using established tools and processes.
• Maintain deployment scripts, pipeline templates, artifacts, and release configurations, and support release approvals.
• Support deployments within restricted environments, following approved procedures for software dependencies and artifact handling.
• Work with developers to troubleshoot pipeline failures, deployment issues, and configuration differences across development, test, and production environments.

Security & Compliance

• Implement and maintain assigned security controls in accordance with applicable Department of Commerce, NTIA, and federal requirements.
• Apply approved configuration baselines and STIGs where required, and remediate identified vulnerabilities with guidance from security personnel.
• Support RMF, ATO, and continuous monitoring activities by collecting technical evidence and tracking remediation actions.
• Maintain secure handling of credentials, secrets, and deployment artifacts throughout the delivery process.

Reliability & Operations

• Configure and maintain monitoring, centralized logging, and alerts using established tools and standards.
• Investigate infrastructure and application issues, review logs, and support incident response and root cause analysis.
• Execute and help test backup, recovery, and rollback procedures.
• Keep deployment documentation, configuration records, and operational runbooks current.
• Support new application releases and production transitions in coordination with the broader engineering team.

Qualifications:

• Active Secret security clearance or higher is required.
• Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
• Bachelor’s degree in Computer Science, Engineering, or a related field and three or more years of relevant DevOps/cloud engineering experience, or five or more years of relevant experience in lieu of a degree.
• Hands-on experience deploying and maintaining infrastructure in Microsoft Azure.
• Experience creating, modifying, and troubleshooting Azure DevOps YAML pipelines for builds, testing, security scanning, and deployments.
• Experience supporting application deployments across development, test, and production environments.
• Practical experience using Infrastructure as Code tools such as Terraform, Bicep, ARM templates, or comparable technologies.
• Experience building and running containers using Docker, with working knowledge of Kubernetes and Helm.
• Ability to write and troubleshoot automation scripts using Python, PowerShell, Bash, or similar languages.
• Experience using Git-based version control, including branches, pull requests, and collaborative code reviews.
• Working knowledge of Linux administration, cloud networking, access controls, secrets management, and monitoring and logging.
• Ability to investigate technical issues, document solutions, communicate progress, and work independently on assigned tasks while collaborating with the team.

Preferred Qualifications:

• Experience with Azure Government, Azure Government Secret, or other restricted federal environments.
• Experience supporting federal system modernization or operational cloud services.
• Familiarity with NIST SP 800-53 controls, RMF, ATO support activities, or STIGs.
• Experience using security scanning tools such as Nessus, SonarQube, Microsoft Defender for Cloud, Aqua Security, or comparable products.
• Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
• Familiarity with database or search platforms such as SQL Server, PostgreSQL, Elasticsearch, or OpenSearch.
• Exposure to data engineering or machine learning workloads, including platforms such as Databricks or Apache Spark.
• Relevant Microsoft Azure administration, development, DevOps, or security certifications.