Senior Cloud Platform and DevSecOps Engineer - TS/SCI with Polygraph

Description

The company is a technology and professional services firm with about 26,000 staff in more than 50 countries, supplying mission services to US government, defense and intelligence customers.

This regular position sits in the IT Infrastructure and Operations family and centers on cloud platform engineering and DevSecOps.

Responsibilities

• Build Azure platform components under the Principal Cloud Architect's direction, including landing zones, networking, policy, logging, identity hooks, key and secret management, and workload hosting.
• Write version-controlled infrastructure-as-code modules in Terraform, Bicep/ARM, Ansible or approved equivalents, and enforce peer review, testing and controlled releases.
• Build and run internal CI pipelines and container, registry, package, image and artifact mirror services in GitLab, Jenkins or equivalents, designed for disconnected delivery.
• Put supply-chain controls in place: SBOM generation, dependency and image scanning, signing, provenance, allowlists and promotion gates.
• Create hardened container images, deployment templates, configuration standards and per-environment overlays for applications, data services and AI inference workloads.
• Automate provisioning, patching, backup, recovery, certificate and secret rotation, compliance checks and routine operations.
• Connect platform telemetry to Azure Monitor, Sentinel, Dynatrace, ServiceNow and the enterprise observability architecture.
• Work with Security and RMF staff to implement controls and produce reusable evidence from code, pipeline, scan and configuration output.
• Troubleshoot complex platform failures, lead technical recovery when assigned, record root causes and turn lessons into platform improvements.
• Mentor engineers, review code and designs, and help domain teams use approved platform patterns instead of building their own infrastructure.

Requirements

• Bachelor's degree in computer science, software engineering, information technology or a related STEM field, or approved equivalent experience.
• Active TS/SCI with Polygraph clearance.
• US citizenship.
• 8+ years in cloud, platform, systems or DevSecOps engineering, including 3+ years building production platform automation.
• Hands-on Azure or Azure Government work across networking, compute, storage, identity integration, policy, monitoring and secure configuration.
• Strong IaC skills in Terraform, Bicep/ARM, Ansible or equivalent, covering module design, state and change management, testing and peer-reviewed promotion.
• Experience building or running CI/CD and artifact or container services in enterprise or disconnected environments with GitLab, Jenkins, Nexus/Artifactory, Harbor, Kubernetes/OpenShift or comparable tools.
• Solid Linux and Windows administration and proficiency in Python, PowerShell, Bash or another automation language.
• Experience with container hardening, image and dependency scanning, SBOMs, secrets management, certificate handling and rollback or recovery.
• Working knowledge of RMF/STIG controls, change management, operational acceptance, logging and audit, and classified data handling.
• Ability to lead technical work, review others' code and designs, raise risk early and stay calm during production incidents.
• Preferred: Azure Administrator Associate or DevOps Engineer Expert certification, plus a relevant Terraform certification.
• Preferred: experience supporting GPU/AI platforms, ML model artifacts, offline Python wheelhouses or local inference services.
• Preferred: experience linking ServiceNow change and CMDB records to pipeline and deployment events.
• Preferred: experience with policy-as-code, compliance-as-code, infrastructure testing, chaos or resilience testing, or FinOps automation.

Conditions

Onsite role based in Chantilly, Virginia, USA.

Scheduled for 40 hours per week, with no travel required.

The likely salary range is $148,750 to $201,250, but this is not a guaranteed figure; actual pay depends on experience, location and possibly contract terms, and may fall outside this range.

Hiring includes an identity verification step using biometrics and AI; virtual interviews require you to be on camera, and your photo may be taken for verification.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Medical plans, some with Health Savings Accounts, plus dental and vision coverage.
• 401(k) with pre- and post-tax contributions up to IRS annual limits, plus a company match.
• Full flex work weeks where possible.
• Paid time off for vacation, sick and personal time, holidays, parental, military, bereavement and jury duty leave.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness and business travel accident insurance, provided or available.
• An internal mobility team and an AI-powered career tool that identifies next career steps and learning options.