Platform DevSecOps SME

Quick Facts

• Title: Platform DevSecOps SME

• Category: Engineering

• Work arrangement: Fully remote

• Compensation: $175,000–$210,000

• Education: Bachelor’s degree

• Citizenship: U.S. Citizen or Permanent Resident

Description

Lead expert-level, hands-on platform engineering and DevSecOps leadership for the AWIPS HIVE modernization effort. You will run cloud delivery and security controls in a GitLab CI/CD + AWS EKS environment, enforcing security scanning, policy-as-code, and compliance evidence throughout the delivery flow. You will also support FISMA High and FedRAMP Moderate ATO activities.

Responsibilities

• Lead GitLab CI/CD pipeline engineering (build/test/scan/deploy) including self-hosted runners and EKS Auto Mode deployments

• Operate multi-region AWS EKS infrastructure using Helm, GitLab Kubernetes Agent, and GitOps with ArgoCD

• Manage infrastructure-as-code using Terraform and/or AWS CDK and oversee container supply chain (ECR signing, scanning)

• Implement DevSecOps pipeline security using SAST/DAST/SCA/container/secrets scanning as enforced CI stages

• Enforce policy-as-code with AWS Config, SCPs, and OPA; drive vulnerability management to closure

• Manage secrets and key management (Secrets Manager, KMS) and produce compliance evidence from real CI outputs

• Build observability and threat detection (CloudWatch, X-Ray, Container Insights, CloudTrail, Grafana; Security Hub, GuardDuty, Config, SIEM)

• Lead FISMA High/FedRAMP Moderate compliance work, ATO support, and pen-test coordination

• Implement Zero Trust, least-privilege IAM, and workload identity (IRSA)

• Mentor platform and DevSecOps engineers

Requirements

• Bachelor’s degree in Computer Science, Information Security, or related field

• 12+ years overall experience in platform engineering, DevOps, and/or DevSecOps

• 7+ years hands-on platform/DevOps/DevSecOps ownership

• 4+ years hands-on CI/CD with strong GitLab CI/CD proficiency

• 3+ years Kubernetes in production (AWS EKS) and Docker

• Hands-on infrastructure-as-code (Terraform/AWS CDK), scripting (Bash/Python), and GitOps (ArgoCD)

• Deep experience with SAST/DAST/SCA/container and secrets scanning as enforced pipeline gates

• 3+ years AWS security (IAM, GuardDuty, Security Hub, KMS, WAF, Config)

• Federal compliance expertise: FISMA, FedRAMP, NIST 800-53, Zero Trust

Benefits

• Competitive compensation: $175,000–$210,000

• Fully remote work