Senior DevSecOps / Platform Engineer

Peraton is a national security and enterprise IT company delivering mission-critical solutions and technologies. Peraton Labs is seeking a Senior DevSecOps / Platform Engineer to own an Agentic AI platform across CI/CD, cloud infrastructure, Kubernetes operations, observability, security, and runtime reliability.

Responsibilities:

• Own and operate the Agentic AI platform end-to-end across CI/CD, cloud infrastructure, Kubernetes operations, observability, and runtime reliability
• Design, build, and maintain CI/CD pipelines across GitHub Actions and/or GitLab CI, enabling secure, repeatable, and efficient delivery workflows
• Implement and improve automated testing and quality gates within the software delivery lifecycle, including build validation, integration checks, security testing, and deployment controls
• Lead operational ownership of Amazon EKS / Kubernetes environments, including cluster lifecycle management, upgrades, troubleshooting, RBAC, Helm-based deployments, pod identity, and GitOps-aligned workflows
• Build and maintain AWS infrastructure supporting platform and application needs across services such as VPC, IAM, S3, RDS, CloudTrail, and KMS
• Own infrastructure provisioning and lifecycle management through OpenTofu / Terraform and related infrastructure-as-code practices
• Design and operate a mature monitoring, logging, and alerting stack using CloudWatch, Prometheus/Grafana, or equivalent tooling
• Develop actionable alerts, service health indicators, and SLO-aligned operational thresholds that support fast triage and resilient service delivery
• Build and maintain synthetic and transactional monitoring that exercises real authentication flows, user journeys, and critical service transactions
• Implement and maintain DAST and runtime security testing in delivery pipelines using tools such as OWASP ZAP, Burp, Nuclei, or equivalent
• Support security-focused CI/CD practices including secrets management, least privilege, software supply chain integrity, and audit evidence generation
• Drive modern engineering delivery patterns such as trunk-based development, merge-request-driven change, and automated release quality controls

Requirements:

• Minimum of BS with 8+ years of experience, MS with 6+ YoE, or PhD with 3+ YoE in platform engineering, DevOps, SRE, or closely related infrastructure engineering roles
• Deep CI/CD experience with GitHub Actions and/or GitLab CI
• Strong hands-on background operating Amazon EKS / Kubernetes environments
• Senior-level AWS experience across core services including VPC, IAM, S3, RDS, CloudTrail, and KMS
• Strong experience building and operating monitoring, logging, and alerting solutions at scale using CloudWatch, Prometheus/Grafana, or equivalent
• Hands-on infrastructure-as-code experience using OpenTofu / Terraform
• Experience supporting agile delivery models, including trunk-based development, MR-driven change, and automated quality gates
• Strong security and compliance engineering foundation, including secrets management, least privilege, supply chain integrity, and audit evidence support
• Experience implementing automated testing in CI/CD pipelines
• Experience running DAST and security testing against live services in pipeline workflows, including triage and gating of findings alongside SAST/SCA results
• Experience building synthetic and transactional monitoring, including scripted health checks that validate real auth flows and critical transactions
• Strong troubleshooting, systems thinking, and operational ownership mindset
• US Citizenship is a requirement for this position
• Experience implementing BigBang / Platform One
• Familiarity with Iron Bank, Sigstore/Cosign, and hardened image pipeline practices
• Prior experience supporting systems pursuing or maintain an ATO
• Experience with contract testing such as PACT
• Experience with chaos engineering concepts or tooling
• Experience with progressive delivery approaches such as canary or blue/green deployments with automated rollback based on health-check failure
• Experience working in regulated or mission environments aligned to NIST 800-171, CMMC, FedRAMP, or DoD security expectations
• Background helping mature platform reliability and security in cloud-native environments supporting sensitive workloads