DevOps Engineer / Mid - Senior level

Description

The company works in space, defense, and national security technology, building mission-critical systems for ground and space use.

This is a mid to senior DevOps Engineer role that requires an active Secret clearance.

The engineer will set and own the enterprise source control and release engineering strategy so that development and engineering teams can build, test, and release software through standard, secure, and auditable workflows.

The role consolidates scattered Git platforms and repository practices into one governed source control and automation foundation, and sets the CI/CD standards teams build against.

The role also owns shared platform services that build and release pipelines rely on: a container registry, object storage, and centralized secrets management, which replace team-specific instances with enterprise-supported services.

Responsibilities

• Define and own the enterprise Git platform strategy, covering standards, architecture, and the long-term roadmap.
• Lead the move of repositories from legacy and fragmented platforms onto one approved enterprise Git standard.
• Administer self-hosted and cloud-hosted Git platforms, including repository structure, access controls, and branch protection.
• Connect Git platforms to identity and access management so users are provisioned and deprovisioned automatically.
• Set and enforce branching strategies, code review workflows, and repository governance across engineering teams.
• Manage platform licensing, seat allocation, organizational structure, and version upgrades.
• Design, build, and maintain CI/CD pipelines across the organization's build and release tools.
• Automate build, test, security scanning, and deployment across development, staging, and production.
• Create reusable pipeline templates and shared workflow libraries so teams follow the same CI/CD practices.
• Connect artifact repositories and container registries to pipeline workflows.
• Track and improve pipeline performance, reliability, and compute cost across CI/CD platforms.
• Deploy and run an organization-wide container registry, such as Harbor or an equivalent, to host, scan, and manage images for engineering and manufacturing teams, and move existing team registries onto it.
• Deploy and run organization-wide S3-compatible object storage, such as MinIO or an equivalent, for build artifacts, test data, and engineering files.
• Own centralized secrets management, such as HashiCorp Vault or an equivalent, as a shared service for pipelines, applications, and infrastructure automation, replacing ad hoc or team-local secret handling.
• Define access control, retention, backup, and disaster recovery policies for the registry, object storage, and secrets platforms.
• Write and maintain Terraform and/or CloudFormation infrastructure as code for Git, CI/CD, and platform services.
• Write automation scripts in Python, PowerShell, and Bash for platform operations, developer tooling, and workflow automation.
• Containerize build and deployment workflows with Docker and support Kubernetes-based deployment pipelines.
• Work with cybersecurity and compliance teams to confirm Git platform configurations meet data handling and access control rules.
• Set up audit logging, access reviews, and compliance reporting for source control and CI/CD systems.
• Add static and dynamic application security testing and dependency scanning to pipelines.
• Monitor platform health, pipeline failures, and security events, and build proactive alerts and self-healing where practical.
• Work with engineering, data, and platform teams to turn development workflow needs into Git and CI/CD solutions.
• Write and maintain documentation for Git standards, pipeline templates, and platform runbooks.
• Act as the technical point of contact and escalation for Git and CI/CD issues across the organization.
• Take part in architecture reviews and cross-functional planning for engineering tooling and the platform roadmap.

Requirements

• Hold and maintain an active Secret clearance from the start of employment.
• Bachelor's degree in computer science, information technology, or a related field, or equivalent hands-on experience.
• 10 to 12 years of experience in DevOps, platform engineering, or site reliability engineering.
• Hands-on experience administering both GitLab and GitHub at enterprise scale.
• Experience designing, building, and running CI/CD pipelines across multiple teams and environments.
• Strongly preferred: experience leading or significantly supporting a large Git platform migration or consolidation.
• Preferred: experience running container registries, object storage, and centralized secrets management, such as Harbor, MinIO, or HashiCorp Vault, as shared platform services.
• Working knowledge of GitLab, self-hosted and SaaS, including administration, group and project structure, permissions, and CI/CD configuration.
• Working knowledge of GitHub Enterprise Cloud and Enterprise Server, including organization and repository management.
• Knowledge of trunk-based development and GitFlow, repository governance, and code review workflows.
• Experience with GitHub Actions, GitLab CI/CD, and Azure DevOps Pipelines.
• Jenkins or other legacy CI tooling is a plus for migration work.
• Experience with artifact management and container registries such as GitHub Packages or the GitLab Container Registry.
• Experience with AWS, including commercial regions and GovCloud, and with Microsoft Azure.
• Experience with Terraform, AWS CloudFormation, and Ansible, plus Docker and basic Kubernetes for containerized build and deployment.
• Required: scripting in Python for automation, API integrations, and tooling, PowerShell for Windows and Azure, and Bash for Linux and pipelines.
• Experience deploying and administering Harbor (or equivalent) with image scanning, MinIO (or equivalent S3-compatible storage), and HashiCorp Vault (or a cloud-native equivalent) as a platform service.
• Experience with Okta SSO and SCIM integration and Active Directory.
• Experience with SAST, DAST, and dependency scanning tools.
• Experience with monitoring and observability tools such as Prometheus and Grafana, or equivalents.
• Strong communication skills with engineering, security, and leadership audiences.
• Able to work independently and to own enterprise-wide tooling and governance decisions.
• Detail-oriented, treating pipeline configurations and platform settings as production-grade, auditable artifacts.
• Works well across IT, security, and engineering teams.
• Preferred certifications: GitHub Actions Certification, GitHub Administration Certification, GitLab Certified CI/CD Associate, GitLab Certified Git Associate, HashiCorp Certified: Terraform Associate, AWS Certified DevOps Engineer - Professional, Microsoft Certified: DevOps Engineer Expert.
• Certified Kubernetes Administrator (CKA) is a plus.

Conditions

Fully remote, with no location preference.

Occasional after-hours availability for platform maintenance, migrations, and incident response.

Takes part in sprint-based delivery against a defined platform roadmap.

Must follow all applicable data handling and access control policies.

The good faith base salary range is $160,000 to $180,000 at the time of posting. Placement in the range depends on experience, skills, and location. The range covers base salary only, not benefits or bonus and incentive pay, and may change.

Must be a U.S. Person, meaning a U.S. citizen, a lawful permanent resident, or a protected individual under 8 U.S.C. § 1324b(a)(3), to meet U.S. export rules under ITAR (22 CFR Parts 120 to 130) and EAR (15 CFR Parts 730 to 774). Must be eligible to obtain any required export authorization from the U.S. Department of State or U.S. Department of Commerce.

The company is an equal opportunity employer that welcomes minority, female, disabled, and veteran candidates.

This description is not a contract, and the company may change the scope of the role at any time.

Benefits

• Flexible time off to rest and keep a healthy work-life balance.
• Medical, dental, and vision coverage for employees and their families, with most of the premium covered by the company and many benefits paid at 100% for employees.
• 401(k) with a 50% company match on contributions up to 8%.
• Gym memberships at more than 12,700 locations nationwide, including 24 Hour Fitness, EoS Fitness, Crunch Fitness, Anytime Fitness, Blink Fitness, Chuze Fitness, and others, with no long-term contracts and free on-demand workout videos before you join.
• Company wellness programs for physical and mental health.
• Additional voluntary benefits and employee support resources.
• Work alongside a highly skilled team on an innovative, mission-driven product.