Senior DevSecOps Engineer

Quick Facts

• Role: Senior DevSecOps Engineer

• Location: Fully remote (primary: VA, US)

• Compensation: $120,000–$136,000

• Clearance: None

• Citizenship: U.S. Citizen or Permanent Resident

Description

You will build and operate the AWS cloud platform behind the HIVE safety-of-life weather-warning system for the National Weather Service. The environment uses EKS, a fully GitOps deployment model, and infrastructure defined as code, within a FISMA-Moderate compliance path.

Responsibilities

• Own Terraform for a multi-environment, multi-account AWS estate (modules, remote state, drift reconciliation)

• Operate Amazon EKS clusters (networking, autoscaling, add-ons, workload identity, cluster lifecycle)

• Extend GitOps delivery using ArgoCD (a merge is a deployment)

• Build and harden CI/CD pipelines in GitLab with security scanning, secrets detection, policy-as-code, container image scanning/signing, and an evidence trail

• Advance security and compliance posture against NIST 800-53 (least-privilege IAM, network isolation, continuous monitoring, ATO artifacts)

• Support migration to a federal multi-account landing zone (identity, cross-account networking, environment promotion)

• Mentor mid- and junior engineers; raise the bar on change control, review discipline, and evidence-based engineering

Requirements

• Bachelor’s degree in Computer Science, Software Engineering, or related field

• 5-7 years in infrastructure, platform, or DevOps with senior ownership of production systems

• Deep hands-on Terraform (reusable modules, remote state, drift reconciliation)

• Strong AWS depth: VPC and networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager

• Production-scale Kubernetes/EKS: workload identity (Pod Identity/IRSA), Helm, autoscaling, ingress and load balancing

• GitOps experience (ArgoCD or Flux) and CI/CD pipeline engineering (GitLab CI strongly preferred)

• DevSecOps practice: SAST/container/IaC/secrets scanning and policy-as-code (OPA/conftest) with enforced gates

• Working knowledge of federal compliance frameworks and ATO support requirements (FISMA/NIST 800-53/RMF)

• 5+ years AWS cloud services; 5+ years containerization (Docker) and orchestration (ECS/EKS)

• U.S. Citizen or Permanent Resident

Benefits

Fully remote work arrangement.