DevOps Engineer

Hatch IT•Washington, DC

4d•$120,000 - $140,000•Hybrid

About The Position

Expression is seeking a mid-level DevOps Engineer to support the National Telecommunications and Information Administration (NTIA) Federal Spectrum Data Systems (FSDS) program within the U.S. Department of Commerce. The FSDS program modernizes federal spectrum management systems through improved technology, automation, data integration, and interoperability. These systems help NTIA manage federal spectrum use and support essential government missions. The DevOps Engineer will implement and maintain secure Azure cloud infrastructure and CI/CD pipelines for applications, data services, and analytics. The role supports deployments across Azure Commercial, Government, and Secret cloud environments and involves collaboration with senior engineers, software developers, system administrators, and security personnel. The successful candidate will take ownership of defined tasks, troubleshoot deployment issues, and automate repeatable work while continuing to develop their skills. The position is based in Washington, DC, with three days per week on-site.

Requirements

Active Secret security clearance or higher.
Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
Bachelor’s degree in Computer Science, Engineering, or a related field and three or more years of relevant DevOps/cloud engineering experience, or five or more years of relevant experience in lieu of a degree.
Hands-on experience deploying and maintaining infrastructure in Microsoft Azure.
Experience creating, modifying, and troubleshooting Azure DevOps YAML pipelines for builds, testing, security scanning, and deployments.
Experience supporting application deployments across development, test, and production environments.
Practical experience using Infrastructure as Code tools such as Terraform, Bicep, ARM templates, or comparable technologies.
Experience building and running containers using Docker, with working knowledge of Kubernetes and Helm.
Ability to write and troubleshoot automation scripts using Python, PowerShell, Bash, or similar languages.
Experience using Git-based version control, including branches, pull requests, and collaborative code reviews.
Working knowledge of Linux administration, cloud networking, access controls, secrets management, and monitoring and logging.
Ability to investigate technical issues, document solutions, communicate progress, and work independently on assigned tasks while collaborating with the team.

Nice To Haves

Experience with Azure Government, Azure Government Secret, or other restricted federal environments.
Experience supporting federal system modernization or operational cloud services.
Familiarity with NIST SP 800-53 controls, RMF, ATO support activities, or STIGs.
Experience using security scanning tools such as Nessus, SonarQube, Microsoft Defender for Cloud, Aqua Security, or comparable products.
Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
Familiarity with database or search platforms such as SQL Server, PostgreSQL, Elasticsearch, or OpenSearch.
Exposure to data engineering or machine learning workloads, including platforms such as Databricks or Apache Spark.
Relevant Microsoft Azure administration, development, DevOps, or security certifications.

Responsibilities

Deploy, configure, and maintain Azure resources supporting unclassified and classified spectrum management systems.
Create and update Infrastructure as Code using established patterns and tools such as Terraform, Bicep, or ARM templates.
Build and maintain Docker images and support container deployments using Kubernetes and Helm.
Configure networking, access controls, and environment settings in coordination with senior engineers and security personnel.
Develop and maintain Azure DevOps pipelines that automate application builds, testing, and deployments.
Integrate and maintain code, dependency, container image, and infrastructure security checks using established tools and processes.
Maintain deployment scripts, pipeline templates, artifacts, and release configurations, and support release approvals.
Support deployments within restricted environments, following approved procedures for software dependencies and artifact handling.
Work with developers to troubleshoot pipeline failures, deployment issues, and configuration differences across development, test, and production environments.
Implement and maintain assigned security controls in accordance with applicable Department of Commerce, NTIA, and federal requirements.
Apply approved configuration baselines and STIGs where required, and remediate identified vulnerabilities with guidance from security personnel.
Support RMF, ATO, and continuous monitoring activities by collecting technical evidence and tracking remediation actions.
Maintain secure handling of credentials, secrets, and deployment artifacts throughout the delivery process.
Configure and maintain monitoring, centralized logging, and alerts using established tools and standards.
Investigate infrastructure and application issues, review logs, and support incident response and root cause analysis.
Execute and help test backup, recovery, and rollback procedures.
Keep deployment documentation, configuration records, and operational runbooks current.
Support new application releases and production transitions in coordination with the broader engineering team.