Sr DevSecOps Platform Engineer

Position Description:

• Senior DevSecOps Platform Engineer to build, evolve, and set direction for enterprise shared services platforms that support development teams across a large federal organization.
• This is a hands-on, high-impact role for a self-directed engineer who can assess the current state of a mature CI/CD ecosystem, understand where it needs to go, and then personally design, build, and ship the solutions that close the gap.
• Expect to spend most of your time writing pipeline code, automation, and tooling, not only producing designs for others to implement.
• The platform's tooling ecosystem spans dozens of interconnected codebases, some fairly large, written in Go, Groovy, Java, Python, and Ansible; you will need to grasp them quickly at a high level and enhance them directly

Future Roles & Responsibilities:

• Serve as a senior technical authority for the organization's CI/CD and platform engineering ecosystem, providing direction on enhancements, upgrades, and long-term strategy, and leading by building.
• Evaluate current pipeline architecture and tooling, define target-state approaches, and deliver them incrementally through working prototypes and production releases.
• Architect, build, and evolve scalable enterprise CI/CD solutions serving multiple project teams, applying DevOps and GitOps best practices, Pipeline as Code, reusable shared libraries, templated deployments, and automated quality, security, and approval gates.
• Engineer end-to-end automation that embeds agency security, change management, and release approval requirements directly into the software delivery process, minimizing manual effort.
• Lead migration and modernization initiatives from on-premises and self-hosted tooling to SaaS and cloud-native platforms, from tool selection and proof-of-concept through phased rollout and adoption.
• Drive platform and dependency upgrades, technical debt reduction, and continuous improvement to keep shared tooling current, secure, and supportable.
• Create, harden, and deploy containerized workloads and deployment patterns on Kubernetes and OpenShift, including Helm-based packaging and GitOps-style delivery.
• Define DevSecOps standards and implement them directly in pipelines and tooling, including SAST and SCA (e.g., SonarQube, Black Duck), container and image scanning, secrets management, RBAC, SBOM, and software supply chain security.
• Architect and write Infrastructure as Code and configuration management solutions using Terraform, CloudFormation, Ansible, or similar technologies, including reusable modules and roles.
• Stand up, automate, and operate workloads in AWS cloud environments including IAM, Fargate, ECR, S3, CloudWatch, and related services.
• Rapidly learn and directly enhance dozens of interconnected tooling codebases written in Go, Groovy, Java, Python, and Ansible, including PostgreSQL-backed services.
• Develop operational tooling, bots, and integrations using Python, Java, Node.js, Bash, PowerShell, or other languages to automate repetitive platform and remediation work.
• Plan and implement platform metrics and observability solutions using Prometheus, Grafana, ELK Stack, OpenSearch, CloudWatch, or similar to measure delivery performance and platform health.
• Prototype and adopt emerging capabilities, including AI-assisted and agentic development tooling, where they deliver measurable value.
• Act as the escalation point for complex build, deployment, integration, and infrastructure issues, driving root cause analysis and durable fixes.
• Communicate technical tradeoffs clearly to technical and non-technical stakeholders, including leadership.
• Mentor engineers, review designs and code, and establish platform standards, documentation, and engineering best practices.

Key Required Skills

• 5+ years of experience in DevOps, DevSecOps, Platform Engineering, Site Reliability Engineering, or related disciplines.
• Demonstrated record of independently conceiving, architecting, and personally building significant platform, pipeline, or automation initiatives from concept through production adoption.
• Currently hands-on: regularly writes and ships pipeline code, automation, and tooling, with a record of clean, maintainable, well-tested code.
• Ability to work with minimal direction: define problems, ask clarifying questions, propose solutions, and drive work to completion.
• Deep hands-on experience designing and building CI/CD pipelines and reusable pipeline libraries or templates (e.g., Jenkins, GitLab CI, GitHub Actions, Azure DevOps, Tekton).
• Experience with container technologies (Docker, Podman, or CRI-O) and orchestration platforms (Kubernetes, OpenShift, or similar).
• Experience working within AWS or comparable cloud environments.
• Proficiency writing production code in at least two of Go, Groovy, Python, or Ansible, plus working knowledge of SQL and PostgreSQL.
• Ability to quickly read, understand, and modify code and configuration across many languages and formats, such as Groovy, Go, Python, Ansible, Helm templates, YAML, JSON, and shell.
• Experience with Infrastructure as Code and configuration management solutions such as Terraform, CloudFormation, or Ansible.
• Strong knowledge of application and software supply chain security, vulnerability management and CVE remediation, and DevSecOps practices.
• Strong knowledge of Git-based source control, release flow and branching strategies and their tradeoffs, and collaborative development workflows.
• Excellent troubleshooting, analytical, written, and verbal communication skills.

Desired Skills

• Experience serving as a hands-on technical lead or architect for enterprise platform engineering or shared services environments.
• Experience automating release governance, change management, or approval workflows within regulated environments.
• Experience building metrics collection, reporting, or dashboards to measure software delivery performance (e.g., DORA metrics).
• Experience with artifact repositories and dependency management (Nexus, Artifactory).
• Familiarity with Java-based web services (e.g., Spring Boot) to support and maintain platform components.
• Experience applying AI-assisted or agentic development tools to engineering and operational workflows.
• AWS, Kubernetes, Red Hat OpenShift, Terraform, or security-related certifications.
• Experience with Agile software development methodologies.
• Experience in federal, regulated, or compliance-driven environments.