- Location
- Huntsville, AL,US, US · Colorado Springs, CO,US, US
- Workplace
- Hybrid
- Type
- Full-time
- Department
- Engineering
- Seniority
- Senior
- Experience
- 5+ years
- Education
- Master
- Clearance
- Required
- Source
- Eightfold
Description
Analyze legacy DoW application portfolios and design target-state architectures for IL5/IL6 environments. Re-platform workloads using hardened containers (e.g., DoD Iron Bank) and Kubernetes, or re-architect for cloud-native services to enhance mission resilience. Architect and implement end-to-end CI/CD pipelines aligned with the DoD Enterprise DevSecOps Reference Design. Build the automation framework necessary to support a Continuous Authority to Operate (cATO), integrating source control, build automation, and deployment strategies. Embed automated security controls directly into the pipeline. Implement SAST/DAST/SCA scanning, automated DISA STIG compliance checks, and Open Policy Agent (OPA) guardrails to ensure all deployments meet Risk Management Framework (RMF) requirements prior to release. Develop and enforce modular IaC templates (AWS CloudFormation, Azure ARM, Terraform) to define and provision hybrid mission environments. Ensure all infrastructure deployments are version-controlled, repeatable, and peer-reviewed. Provide technical leadership for transitioning workloads from legacy on-premise SIPR/NIPR environments to AWS GovCloud/Secret and Azure Government. Design the automation to execute migrations with zero mission degradation. Security Clearance: Must possess an active DoD Secret or Top Secret clearance. (TS/SCI preferred). DoD Certification: Must meet DoD 8140/8570 IASAE Level II or III requirements (e.g., CISSP, CASP+, or CISSP-ISSEP). 8 years in IT infrastructure or software engineering, with at least 5 years architecting cloud workloads or building DevSecOps pipelines in federal/DoD environments. Hybrid Cloud Expertise: Proven, hands-on experience designing architectures that span AWS GovCloud, Azure Government, and on-premise VMware vSphere environments (vCenter, ESXi, NSX). DevSecOps Tooling: Deep practical knowledge of containerization (Docker/Kubernetes), CI/CD orchestration (e.g., GitLab CI, Jenkins), and integrating security scanners (e.g., SonarQube, Fortify, Twistlock). IaC Mastery: Extensive experience with AWS CloudFormation and/or Terraform for deploying infrastructure in highly regulated environments. AWS Certified DevOps Engineer - Professional, Azure DevOps Engineer Expert, or CKA (Certified Kubernetes Administrator). Strong proficiency in Python, Bash, Typescript, or PowerShell for building complex automation and pipeline glue logic. Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, or a related technical discipline.