Senior AWS DevSecOps / Platform Engineer

Select Source Solutions•Greenbelt, MD

3d•Remote

About The Position

The Senior AWS DevSecOps / Platform Engineer is a remote, hands-on role responsible for building, securing, and operating a mission-critical AWS cloud platform supporting high-availability scientific and operational workloads. The engineer owns production AWS infrastructure across its lifecycle, from Infrastructure as Code and deployment through validation, monitoring, and ongoing operations. The environment uses AWS, Amazon EKS, Terraform, GitLab CI/CD, Kubernetes, and GitOps, with an emphasis on automation, security, reliability, and federal compliance. Infrastructure changes are managed through code and automated pipelines rather than manual configuration. The role is part of a small, experienced engineering team. Senior engineers have meaningful ownership and influence over platform architecture, security, automation, and engineering standards. The engineer collaborates with application developers, security teams, architects, and other technical stakeholders to deliver secure, reliable production services, and provides mentorship and technical leadership.

Requirements

7+ years of professional experience in DevOps, platform engineering, cloud infrastructure, systems engineering, or a related discipline, including senior-level ownership of production environments.
Deep hands-on experience with Terraform, including reusable modules, remote state, infrastructure lifecycle management, and remediation of configuration drift.
Strong hands-on AWS engineering experience supporting production workloads.
Experience with AWS networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud services.
Hands-on experience operating Kubernetes and Amazon EKS in production, not simply deploying applications to an existing cluster.
Experience with Kubernetes networking, autoscaling, workload identity, Helm, ingress, load balancing, and cluster lifecycle management.
Hands-on experience implementing GitOps using Argo CD, Flux, or a comparable platform.
Experience engineering CI/CD pipelines; GitLab CI/CD is strongly preferred.
Experience implementing DevSecOps controls such as SAST, container scanning, Infrastructure as Code scanning, secrets detection, or policy-as-code.
Strong experience with Git-based development and infrastructure workflows, including merge requests, peer review, and controlled production changes.
Experience supporting secure, highly available cloud infrastructure.
Working knowledge of federal cybersecurity frameworks such as FISMA, NIST SP 800-53, and RMF, including familiarity with requirements supporting an Authority to Operate.
Strong troubleshooting, documentation, and communication skills.
Ability to mentor engineers and provide senior technical leadership.
Must be a U.S. Person and able to obtain and maintain a Public Trust.
Ability to obtain and maintain a security clearance.

Nice To Haves

Experience designing or operating multi-account AWS environments, AWS Organizations, Control Tower, or federal cloud landing zones.
Experience with AWS GovCloud or FedRAMP environments.
Experience implementing container supply-chain security, including SBOMs, image signing, admission controls, or AWS Signer.
Experience with CloudWatch, Grafana, Prometheus, or comparable observability technologies.
Experience with Docker and secure container build practices.
Experience with serverless AWS technologies such as Lambda.
Experience with real-time or event-driven data-processing architectures.
AWS certification such as Solutions Architect, DevOps Engineer, or Developer.
Experience supporting scientific, environmental, geospatial, weather, or other data-intensive mission systems.
Familiarity with scientific data formats such as NetCDF or GRIB.

Responsibilities

Design, build, maintain, and improve production AWS infrastructure across multiple environments.
Develop and maintain reusable Terraform modules and Infrastructure as Code for provisioning and managing cloud infrastructure.
Manage Terraform remote state and safely reconcile differences between deployed infrastructure and Infrastructure as Code.
Operate and maintain production Amazon EKS environments, including cluster networking, autoscaling, add-ons, upgrades, workload identity, ingress, and load balancing.
Design and support Kubernetes workloads using Helm and modern container orchestration practices.
Build and maintain GitOps-based deployment workflows using Argo CD, Flux, or comparable technologies.
Develop and harden GitLab CI/CD pipelines supporting infrastructure and application delivery.
Integrate automated security controls into CI/CD pipelines, including SAST, Infrastructure as Code scanning, container scanning, secrets detection, policy enforcement, and artifact validation.
Implement policy-as-code technologies such as OPA, Conftest, or comparable tools.
Support container supply-chain security, including image scanning, Software Bills of Materials (SBOMs), image signing, and deployment validation.
Design and maintain secure AWS identity and access patterns using IAM and workload identity technologies such as IRSA or EKS Pod Identity.
Design and support AWS networking, including VPCs, routing, load balancing, security boundaries, and cross-account connectivity.
Work with AWS services including EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud technologies.
Support the development and evolution of multi-account AWS environments and federal landing-zone architectures.
Implement least-privilege access, network isolation, continuous monitoring, security controls, and other cloud-hardening practices.
Support federal cybersecurity requirements including NIST SP 800-53, FISMA, RMF, and Authority to Operate activities.
Develop and maintain technical evidence and documentation supporting security controls and compliance reviews.
Implement monitoring, logging, alerting, and observability using technologies such as Amazon CloudWatch, Grafana, or comparable platforms.
Troubleshoot complex AWS, Kubernetes, Terraform, networking, pipeline, security, and production infrastructure issues.
Mentor other engineers and help establish strong engineering practices around code review, change management, automation, testing, and technical documentation.
Collaborate with application developers, security teams, architects, and other technical stakeholders to deliver secure and reliable production services.