DevSecOps Lead Engineer

Description

The company is hiring a DevSecOps Lead Engineer in Information Technology to own the health, security, and ongoing state of its AWS cloud environment.

This is a hands-on technical leadership role. You will be the go-to engineer for a small team and the main technical contact for the program on infrastructure, automation, and secure software delivery.

Responsibilities

• Design, run, and troubleshoot production Kubernetes clusters and Helm-packaged workloads.
• Manage the full state of the AWS environment, covering provisioning, configuration, drift detection, cost, and security posture.
• Keep infrastructure fully defined and version-controlled in Terraform.
• Build and maintain GitLab CI/CD pipelines and run ArgoCD for GitOps-based continuous deployment.
• Write and maintain Python tools and automation for infrastructure and operations work.
• Act as the senior technical escalation point for the team and the wider program on infrastructure, DevOps, and security questions.
• Build security into every stage of development and delivery, including secrets management, least-privilege IAM, vulnerability scanning, policy-as-code, and compliance controls.
• Advise on adding LLM and AI-based tools and workflows to engineering practice where they add real value.
• Coach team members on infrastructure-as-code, Kubernetes, and CI/CD practices.

Requirements

• Required: 7+ years in DevOps, DevSecOps, cloud infrastructure, or SRE roles.
• Required: Deep hands-on AWS experience at production scale across compute, networking, IAM, and storage.
• Required: Strong production experience with Terraform, Kubernetes, and Helm.
• Required: Proficiency in Python for automation and tooling.
• Required: Experience building and maintaining GitLab CI/CD pipelines.
• Required: Hands-on experience with ArgoCD or comparable GitOps tools.
• Required: Working knowledge of LLM and AI concepts, including model deployment, prompting, RAG, and cost and latency trade-offs, enough to guide engineering decisions about AI tools.
• Required: Proven ability to act as the senior or primary technical resource for a small team.
• Required: U.S. citizenship and eligibility to obtain and maintain a Top Secret clearance.
• Desired: AWS Certified Solutions Architect or DevOps Engineer, CKA or CKAD, or HashiCorp Terraform Associate.
• Desired: Prior work on federal or government cloud programs.
• Desired: Familiarity with compliance frameworks such as NIST 800-53 and FedRAMP.
• Desired: Experience adding LLM-based tools to CI/CD or engineering workflows.

Conditions

Full-time, regular position.

No clearance is required to start the role.

Travel of up to 10%, local only.

The role can be based in more than one location. The salary range shown is the national average for the position.

Proposed salary range: $82,100-$172,400. Final pay depends on factors such as location, federal contract labor categories and wage rates, relevant experience, specific skills, education, and certifications.

The company offers competitive pay, benefits, and learning and development, including healthcare, wellness, financial, retirement, family support, continuing education, and time off.

Benefits

• Flexible time off that lets you take the time you need.
• Access to learning resources for professional growth.
• Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.