Description
Join the core engineering team building the new USCG DevSecOps platform that will be used by hundreds of mission-application developers across the Coast Guard. As a senior member of the team, you will design and implement the foundational CI/CD and Security infrastructure on AWS GovCloud utilizing modern Cloud native technologies, automation and “as-code” paradigms.
Primary Responsibilities
- CI/CD & Supply Chain Security: Architect and maintain "Golden Path" CI/CD templates using GitLab CI Components. Engineer and automate the software supply chain, integrating SAST, SCA, container scanning, SBOM generation and artifact signing with Cosign/Sigstore.
- Infrastructure as Code (IaC) & GitOps: Develop modular Terraform code to provision and manage the platform's AWS GovCloud and Kubernetes infrastructure. Implement and manage all cluster-level and application configurations declaratively using GitOps (Argo CD), Kustomize, and Helm.
- Platform Engineering: Deploy, configure, and maintain the core platform services,including GitLab, Jira, Confluence, and HashiCorp Vault. Manage the GitLab Runner architecture on Kubernetes, ensuring fleet-wide security and scalability.
- Security & Compliance Automation: Implement and validate the technical controls such as NIST 800-53 RMF based Authority to Operate (ATO). Automate security hardening and compliance checks using tools like OPA, Kyverno.
- Observability & Monitoring: Implement and manage the platform's observability stack, including centralized logging with Vector/Loki, metrics with Prometheus, and dashboards with Grafana. Configure secure log forwarding to the enterprise SIEM.
Basic Qualifications
- Bachelor's Degree and 12+ years in an IT discipline, with 5+ years in a hands-on DevSecOps role.
- Expert-level knowledge of GitLab CI, including building complex, reusable pipeline templates.
- Strong proficiency with Kubernetes
- Deep, practical expertise with Terraform in an AWS environment (GovCloud highly preferred).
- Hands-on experience implementing GitOps principles with Argo CD.
- Hands-on experience with observability tools, including Prometheus, Grafana, and a centralized logging stack (e.g., Loki, Vector, or Fluentd). Experience configuring log shipping to a SIEM.
- Solid understanding of cloud-native security, including container hardening and secrets management with HashiCorp Vault.
- Proficiency in a scripting language such as Bash, Python or Go
Preferred Qualifications
- Experience in a DoD/Federal environment with DISA STIG and RMF compliance mandates.
- Experience with AWS EKS, Red Hat OpenShift
- Software supply chain security tools (Cosign, Syft, Grype).
- An existing DoD security clearance.
Certifications
- Must have at least 1 certification to be considered.
- CNCF Kubernetes certifications: CKA or CKS or CKAD
- AWS Certified: DevOps Engineer or Solution Architect Associate or Security
- HashiCorp Certified: Terraform Associate