DevOps Engineer with Security Clearance

DevOps Engineer Company: LCS Defense
Clearance: Active TS/SCI with Full-Scope Polygraph required
Experience: 5+ years of relevant DevOps engineering experience
Location: Jessup, MD; Arlington, VA; Herndon, VA OR Denver, CO Position Overview
LCS Defense is seeking a DevOps Engineer to build, maintain, and operate a classified development environment (CDE) and unclassified development infrastructure.
This role supports AWS infrastructure, GitLab administration, CI/CD pipelines, developer workstations, and incident response. The engineer will maintain reliable development services in both standard and air-gapped environments, including a logically isolated environment in an AWS Secret Cloud region.

Key Responsibilities

• Deploy and maintain AWS infrastructure using AWS Cloud Development Kit (CDK) in TypeScript and scripting, including cloud networking configuration.
• Configure and maintain a logically isolated classified development environment in an AWS Secret Cloud region.
• Administer, upgrade, and troubleshoot GitLab in standard and air-gapped configurations, including pipelines, runners, user access, and version control management.
• Support GitLab upgrades to current versions, including planning, validation, and troubleshooting.
• Manage the GitLab runner fleet and resolve traffic and capacity issues to maintain healthy CI/CD pipelines.
• Respond to Severity 2 (Sev2) incidents affecting development infrastructure, driving triage, mitigation, and root cause resolution.
• Monitor system health and perform routine patching and updates across hosted services.
• Provision, patch, and maintain developer desktops and workstations, including Amazon WorkSpaces and DevDesktop environments.
• Manage engineering software tools and licensing, including SolidWorks, Altium, Cameo, and ANSYS HPC.
• Implement and validate two-person, malware-scanned ingress and egress pipelines for transferring data and packages across the classified boundary.
• Build and maintain air-gapped package mirrors for Linux/GNU packages, Python packages, Rust crates, operating system repositories, and Docker images.
• Establish package mirror refresh schedules and track Common Vulnerabilities and Exposures (CVEs) and software licenses. Required Qualifications
• Active TS/SCI clearance with Full-Scope Polygraph.
• At least 5 years of relevant DevOps engineering experience.
• Experience deploying and maintaining AWS infrastructure using CDK in TypeScript, scripting, and cloud networking configuration.
• Experience supporting isolated AWS environments, including classified development infrastructure.
• Experience administering, upgrading, and troubleshooting GitLab, including air-gapped deployments.
• Experience managing CI/CD pipelines and GitLab runner fleets.
• Strong Linux and Windows administration skills, including Linux command-line tools and shell scripting.
• Experience monitoring infrastructure, applying patches, and maintaining developer workstations.
• Experience responding to infrastructure incidents and performing root cause analysis.
• Experience provisioning WorkSpaces or comparable developer desktop environments.
• Experience managing engineering software tools and licensing.
• Experience implementing controlled data transfers and maintaining air-gapped package repositories, including vulnerability and license tracking.