Senior DevOps Engineer

Quantum Sky engineers solutions across cyber, networks, software, and quantum technologies for mission-critical environments. The Senior DevOps Engineer will design, build, and operate secure cloud and container infrastructure across AWS and Google Cloud Platform, while supporting automation, reliability, security, and client-facing technical collaboration.

Responsibilities:

• Design, implement, and maintain cloud infrastructure across AWS and Google Cloud Platform, with Azure as a plus
• Build and manage infrastructure as code using Terraform and CloudFormation, and configuration automation using Ansible
• Write and maintain Bash scripts to automate operational and deployment tasks
• Design, deploy, and operate production Kubernetes platforms using Rancher (RKE2) and Red Hat OpenShift
• Monitor system health through logs, metrics, and alerting, and lead incident response and troubleshooting across infrastructure and hosted applications
• Implement zero trust access controls, so every user, device, and service is continuously verified rather than trusted by default
• Manage identity and access, including federated identity, least-privilege roles, and machine-to-machine authentication
• Harden infrastructure and container platforms to STIG/CIS standards and support the path to Authority to Operate
• Collaborate with the Director of Digital Platforms and the development team to translate architecture decisions into secure, automated, production-ready infrastructure
• Adopt and extend pre-built, pre-approved cloud provisioning templates from our infrastructure automation partner rather than building every pattern from scratch
• Support CI/CD pipelines for reliable, repeatable deployment of infrastructure and applications
• Use AI-assisted development tools such as Claude Code, GitHub Copilot, or comparable technologies as part of day-to-day engineering work
• Contribute to internal best practices for cloud, platform, and security engineering, and stay current with evolving DevSecOps and zero trust practices

Requirements:

• Demonstrated professional experience designing, building, and operating cloud infrastructure in production
• Strong, hands-on experience in both AWS and Google Cloud Platform
• Infrastructure as code experience with Terraform and CloudFormation
• Configuration automation experience with Ansible
• Bash scripting for operational and deployment automation
• Hands-on production experience with Rancher (RKE2) and Red Hat OpenShift
• Real site reliability experience: on-call, incident response, and service-level ownership
• Strong understanding of identity and access management: federated identity, least-privilege roles, machine identity, multi-factor authentication
• Strong understanding of network security fundamentals: segmentation, encrypted service-to-service communication, firewall and security-group design
• Experience implementing zero trust access controls — identity-based, per-session verification rather than perimeter-based trust
• Experience hardening infrastructure and/or an application-hosting platform to STIG/CIS standards, with exposure to the Authority to Operate process
• Deep understanding of networking concepts, sufficient to work closely with network engineering and development counterparts
• Comfortable using AI-assisted development tools as part of daily engineering work
• Strong analytical, troubleshooting, and communication skills, able to work across cloud, platform, security, compliance, and network engineering teams
• US Citizenship with the ability to obtain a security clearance
• Azure experience
• Experience with stackArmor or a comparable pre-accredited cloud landing zone / provisioning product
• Experience with a Department of Defense DevSecOps or hosting program such as Platform One (Big Bang, Iron Bank) or Cloud One
• Familiarity with the NIST Risk Management Framework, NIST Special Publication 800-53, FedRAMP, and FISMA
• Familiarity with the CISA Zero Trust Maturity Model
• Prior experience supporting a Defense Information Systems Agency, Army, Air Force, or other Department of War network or program
• Kubernetes, OpenShift, or cloud provider certifications (CKA, CKAD, CKS, AWS/GCP professional, or equivalent)
• DOD/DoW Secret or Top Secret clearance