Senior/Staff DevOps Engineer, Federal

Trase is hiring a Senior or Staff DevOps Engineer to build, deploy, and operate infrastructure supporting Red Cell Federal and Red Cell Partners’ incubations and portfolio companies. The role focuses on secure partner deployments and sustained operations across cloud, private-network, and on-premises environments, spanning Kubernetes, infrastructure automation, releases, observability, security remediation, and production support.

Responsibilities:

• Build and operate RCF/RCP partner environments across AWS, Azure, GCP, and customer-controlled or on-premises infrastructure, adapting to each program's access, networking, and security requirements
• Package and validate Trase OS services and dependencies using Docker, Kubernetes, Helm, and approved registries. Maintain complete, versioned image inventories, release manifests, and image digests so partner deliveries contain the required artifacts
• Create reusable infrastructure-as-code modules, cluster bootstrap automation, and CI/CD or GitOps workflows using Terraform, Pulumi, Argo CD, or comparable tools
• Prepare and validate networking, IAM, secrets, certificates, storage, registries, and model-provider connectivity. Support restricted-network and disconnected deployment patterns where required, in partnership with application engineers
• Remove or abstract cloud-specific dependencies that block partner deployments. Validate representative agent workflows end to end, including service integrations, authentication, model access, and persistent state
• Own technical triage and troubleshooting for partner deployment and production issues across application services, Kubernetes, cloud infrastructure, and networks. Coordinate fixes and escalations with named owners and verify resolution with partners
• Deliver tested releases, patches, and upgrades with automated validation gates, version compatibility checks, smoke tests, rollback procedures, and clear release notes. Confirm the deployed artifacts match the approved release
• Operate metrics, logs, traces, audit logging, dashboards, alerts, and SLOs for partner environments. Support incident response, recovery, capacity planning, and reliability improvements
• Partner with GRC and RCF security teams on container hardening, vulnerability scanning, CVE remediation, SBOMs, and engineering evidence for applicable STIG, RMF/ATO, and impact-level requirements. Verify fixes through rescanning and deployment validation; coordinate exceptions and approvals with security owners
• Support sustainment of federal deployments, including Second Front where applicable, through patching, image updates, configuration changes, and ongoing security remediation within agreed Trase/partner responsibilities
• Maintain deployment guides, environment inventories, operational runbooks, and troubleshooting documentation. Provide partner onboarding, knowledge transfer, and operational handoffs with clear prerequisites, access boundaries, and support ownership
• Lead infrastructure and reliability decisions across RCF/RCP engagements, keeping partner-specific requirements aligned with Trase's shared architecture
• Set practical standards for secure releases, production readiness, observability, and support handoffs across partner environments
• Work with the TPM, Product, GRC, and partner teams to clarify requirements, validate acceptance criteria, estimate work, and surface risks and dependencies before making commitments
• Turn recurring partner deployment and support needs into reusable automation and platform improvements
• Mentor engineers and partner teams, document decisions, and reduce reliance on individual experts for ongoing operations

Requirements:

• U.S. citizenship is required
• 10+ years of software, platform, infrastructure, SRE, or DevOps engineering experience, including hands-on ownership of production systems
• Deep hands-on experience with Linux, Docker, Kubernetes, and production cluster operations
• Strong experience with Helm and infrastructure as code, such as Terraform or Pulumi, including reusable modules, state management, testing, and change review
• Hands-on infrastructure experience with at least two of AWS, Azure, and GCP, including compute, networking, storage, identity, and managed services
• Experience deploying and operating software in customer-controlled, private-cloud, hybrid-cloud, or on-premises environments, including adapting cloud-native products for these deployment models
• Strong understanding of networking, DNS, ingress, load balancing, certificates, IAM, secrets management, persistent storage, and service-to-service security
• Experience operating CI/CD or GitOps systems for releases, upgrades, and rollbacks, plus observability and incident response for production services
• Strong software engineering and automation skills in Python, Go, TypeScript, or a similar language, with the ability to work across application and infrastructure layers
• Experience hardening production infrastructure and container images, investigating vulnerability findings, and delivering validated security fixes with security teams
• Strong partner-facing communication and troubleshooting skills, with ownership of technical issues from initial report through validated resolution and operational handoff
• Demonstrated experience using AI-assisted coding and engineering tools to accelerate development, infrastructure automation, troubleshooting, operational analysis, or incident investigation
• Prior SRE, DevOps, or infrastructure engineering experience supporting national security, defense, federal agencies, or other government programs
• An active U.S. government security clearance
• Experience operating in restricted-network, disconnected, regulated, or security-sensitive environments
• Hands-on familiarity with STIG hardening, NIST controls, FedRAMP, RMF/ATO evidence, or DoD IL4/IL5/IL6 deployment requirements, as applicable to assigned programs
• Experience with government cloud infrastructure, including AWS GovCloud, and federal deployment platforms such as Second Front/Game Warden
• Experience with software supply-chain security, SBOMs, artifact signing, FIPS-enabled components, Harbor, or policy as code
• Experience supporting long-running, stateful, data-intensive, AI/ML, or GPU-enabled workloads
• Customer-facing, partner engineering, or forward-deployed experience supporting multiple organizations and transferring operational knowledge