DevSecOps Engineer

Peraton•Home, OH

9d•$86,000 - $138,000•Onsite

About The Position

Peraton is seeking a DevSecOps / Platform Engineer located in Columbus, OH to help build and operate the Agentic AI platform across delivery, infrastructure, runtime operations, and platform health. This role will contribute to the technical backbone that enables secure, reliable, and scalable platform delivery, from CI/CD pipelines and automated testing through EKS cluster operations, AWS infrastructure, monitoring, alerting, and synthetic health checking. The ideal candidate combines solid technical execution with operational discipline and a builder mindset, and is growing into the judgment required to design systems that are not only functional, but supportable, observable, secure, and audit-ready. This is a mid-level role that works alongside senior DevSecOps and platform engineers, taking ownership of well-defined areas while continuing to develop breadth and depth across the platform. This is an opportunity to grow as an engineer on the platform layer of a highly visible and ambitious Agentic AI environment. You will work on meaningful problems that require sound technical judgment, operational rigor, and modern engineering practices. For the right candidate, this role offers the chance to build real systems, improve platform resilience, and contribute directly to how advanced AI-enabled capabilities are delivered in secure, compliant, and production-ready ways. Location: Columbus, Ohio — candidates must currently reside in the area or be willing to relocate.

Requirements

5 years with BS/BA; 3 years with MS/MA; 0 years with PhD.
Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, IS, Computer Engineering
Experience operating CI/CD pipelines in GitHub Actions and/or GitLab CI
Experience with cloud infrastructure (AWS) including VPC, IAM, S3, RDS, CloudTrail, KMS
Hands-on experience with Kubernetes (Amazon EKS preferred), including cluster upgrades, RBAC, Helm, GitOps workflows
Experience building and maintaining Terraform/OpenTofu infrastructure-as-code
Strong skills in release planning, deployment automation, validation, rollback procedures
Experience with monitoring/logging/alerting systems (CloudWatch, Prometheus, Grafana, or similar)
Ability to perform anomaly detection, log analysis, and troubleshoot configuration/security issues
Experience implementing automated testing and quality gates across the software delivery lifecycle
Practical understanding of secrets management, least privilege, supply chain security, and audit evidence
Experience performing vulnerability remediation and managing IAVM or similar compliance requirements
Familiarity with DAST and runtime security testing tools (e.g., OWASP ZAP, Burp, Nuclei)
Experience with identity provider integration (SSO/SAML/OIDC) and RBAC administration
U.S. Citizenship
Ability to obtain a Public Trust

Nice To Haves

Experience supporting AI/ML or platform-scale systems (e.g., Agentic AI platforms)
Experience designing synthetic or transactional monitoring tied to user journeys and critical service flows
Experience developing SLOs, service health indicators, and high-fidelity operational alerting
Experience with modern delivery patterns like trunk-based development, merge-request-driven change, automated release quality controls
Experience in security-focused CI/CD or DevSecOps environments
Experience coordinating with customer security teams or operating within compliance frameworks

Responsibilities

Help operate the Agentic AI platform across CI/CD, cloud infrastructure, Kubernetes operations, observability, and runtime reliability
Build and maintain CI/CD pipelines across GitHub Actions and/or GitLab CI, enabling secure, repeatable, and efficient delivery workflows
Implement and improve automated testing and quality gates within the software delivery lifecycle, including build validation, integration checks, security testing, and deployment controls
Plan and execute releases and deployments — coordinating change windows, managing release artifacts, running deployment automation, validating post-deployment health, and supporting rollback procedures
Support operational ownership of Amazon EKS / Kubernetes environments, including cluster lifecycle activities, upgrades, troubleshooting, RBAC, Helm-based deployments, pod identity, and GitOps-aligned workflows
Build and maintain AWS infrastructure supporting platform and application needs across services such as VPC, IAM, S3, RDS, CloudTrail, and KMS
Contribute to infrastructure provisioning and lifecycle management through OpenTofu / Terraform and related infrastructure-as-code practices
Administer user management for the platform — identity provider integration (SSO/SAML/OIDC), role-based access control (RBAC), provisioning and deprovisioning workflows, and periodic access reviews
Help design and operate a mature monitoring, logging, and alerting stack using CloudWatch, Prometheus/Grafana, or equivalent tooling
Routinely assess system logs to detect anomalies, configuration drift, misuse, and security-relevant events; triage findings and drive remediation in coordination with senior engineers and the customer security team
Develop actionable alerts, service health indicators, and SLO-aligned operational thresholds that support fast triage and resilient service delivery
Build and maintain synthetic and transactional monitoring that exercises real authentication flows, user journeys, and critical service transactions
Track and remediate Information Assurance Vulnerability Management (IAVM) notices and other vulnerability advisories — maintain inventory accuracy, drive patching to closure, and produce the evidence required for compliance reporting
Implement and maintain DAST and runtime security testing in delivery pipelines using tools such as OWASP ZAP, Burp, Nuclei, or equivalent
Support security-focused CI/CD practices including secrets management, least privilege, software supply chain integrity, and audit evidence generation
Apply modern engineering delivery patterns such as trunk-based development, merge-request-driven change, and automated release quality controls