Senior DevSecOps Engineer

Job Title: Senior DevSecOps Engineer

Location: Washington, D.C. (Hybrid %20%)

Duration: Long Term Contract

Technical Skills: Years/Level of Experience

Docker (Software) (7-10 yrs experience)

Microservices Architecture (7-10 yrs experience)

Amazon Web Services (AWS) (7-10 yrs experience)

Google Cloud Native Applications (7-10 yrs experience)

API Design (10+ yrs experience)

Role Description:

"What you’ll do

· Own Terraform for a multi-environment, multi-account AWS estate — modules, state, and the safe reconciliation of live infrastructure into code.

· Operate Amazon EKS clusters (not just consume them): networking, autoscaling, add-ons, workload identity, and cluster lifecycle.

· Run and extend our GitOps delivery model (ArgoCD) — where a merge is a deployment, so the review gate and the verification loop matter.

· Build and harden CI/CD pipelines in GitLab: security scanning, secrets detection, policy-as-code, container image scanning and signing, and the evidence trail behind them.

· Advance our security and compliance posture against NIST 800-53 — least-privilege IAM, network isolation, continuous monitoring, and the artifacts that support an Authority to Operate.

· Help design the migration to a federal multi-account landing zone: identity, cross-account networking, and promotion between environments.

· Mentor mid- and junior engineers, and raise the bar on change control, review discipline, and “prove it with evidence” engineering.

What we’re looking for (required)

· 7+ years in infrastructure / platform / DevOps, with senior ownership of production systems.

· Deep, hands-on Terraform — you’ve written reusable modules, managed remote state, and untangled drift between code and live infrastructure without breaking things.

· Strong AWS depth: VPC and networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager.

· Kubernetes / EKS operated at production scale — workload identity (Pod Identity / IRSA), Helm, autoscaling, ingress and load balancing.

· GitOps experience (ArgoCD or Flux) and CI/CD pipeline engineering (GitLab CI strongly preferred).

· DevSecOps in practice: security scanning (SAST, container, IaC, secrets), policy-as-code (OPA / conftest), and the discipline to make gates actually gate.

· Working knowledge of a federal compliance framework — FISMA / NIST 800-53 / RMF — and what it takes to support an ATO.

· Clear written communication and a collaborative, review-driven style.

Highly desirable

· Multi-account AWS landing zone / Control Tower / Organizations design experience.

· Container supply-chain security: SBOMs, image signing (Notation / AWS Signer), admission control.

· Observability with O17CloudWatch and/or Grafana.

· FedRAMP or GovCloud exposure.

· Weather, geospatial, or scientific-data domain background (genuine plus, not required).

Required Qualifications

· Bachelor’s degree in computer science, Software Engineering, or related field

· 5+ years of experience in web application development

· 5+ years of experience with AWS cloud services and development

· Experience with serverless architecture and AWS Lambda, EKS, Docker, Microservices

· Knowledge of cloud data storage options and patterns

· Experience with RESTful API design and implementation

· Understanding of web application security best practices

· Proven ability to mentor other developers and lead technical initiatives

· Understanding of weather data formats (GRIB, NetCDF) and processing requirements

· Experience with containerization (Docker) and orchestration services (ECS, EKS)

· Knowledge of infrastructure-as-code tools (CloudFormation, CDK, Terraform)

· Experience with real-time data streaming in web application

Preferred Qualifications

· Master's degree in relevant technical field

· AWS certifications (Developer Associate, Solutions Architect)

· Experience with geospatial data visualization or mapping libraries

· Knowledge of WebGL, Canvas, or other advanced web visualization technologies

· Experience with D3.js or similar data visualization libraries

· Background in meteorological systems or scientific applications

Education Level : Bachelor's Degree

Work Location On-site (Government / AFS Site): Washington, D.C. / Remote (Client Site)

On-site %: 20%

Special Requirements

Work Authorization: s

Clearance Required: Public Trust Full Clearance