Senior CI/CD & Integration Engineer - Point Mugu

F3EA Inc

10h•Hybrid

About The Position

F3EA is seeking a Senior CI/CD & Integration Engineer to support the Blue Water Instrumentation (BWI) RDT&E Tranche 1 Development and Knowledge Management team at the Point Mugu Sea Range. This role is responsible for designing, building, and maintaining DevSecOps pipelines, automated build/test/deploy workflows, and cross-environment integration solutions spanning CMMC-compliant MS365 GCC High, Azure Government (AzureGov), NMCI, and FlankSpeed environments. The Senior CI/CD & Integration Engineer will establish and operate the automated infrastructure that enables rapid, secure, and repeatable software delivery for AIDI applications, C2 experimentation tools, knowledge management platforms, and business process automation solutions. This role bridges development and operations across multiple DoD enclave boundaries, ensuring that code, configurations, and artifacts flow securely from development through test to deployment in IL4/IL5/IL6 environments while maintaining CMMC, RMF, and STIG compliance at every stage. This position requires deep expertise in Azure DevOps within GCC High, Infrastructure as Code (IaC), container orchestration, and the unique constraints of building and deploying software across air-gapped or boundary-controlled DoD networks.

Requirements

Bachelor’s degree in Computer Science, Software Engineering, Information Technology, or related field (or equivalent combination of education and experience)
8+ years of experience in software engineering, DevOps, or CI/CD pipeline engineering, with at least 3 years in DoD or Federal environments
Demonstrated experience with Azure DevOps in GCC High or equivalent FedRAMP High CI/CD platforms
Proficiency with Infrastructure as Code: Terraform, Bicep, ARM templates, or Ansible for AzureGov resource provisioning
Hands-on experience with container technologies: Docker, Kubernetes (AKS), Helm charts, container registries
Strong scripting and automation skills: PowerShell, Bash, Python, and/or YAML pipeline authoring
Experience integrating SAST/DAST tools, container image scanning, and dependency vulnerability analysis into CI/CD pipelines
Working knowledge of MS365 GCC High, NMCI, and/or FlankSpeed environments and their deployment constraints
Understanding of DoD Cloud SRG impact levels (IL4/IL5/IL6) and their implications for CI/CD and deployment
Familiarity with CMMC 2.0, NIST SP 800-53, DISA STIGs, and cybersecurity compliance requirements for DevSecOps
Experience with API design, integration patterns (REST, GraphQL, message queues), and cross-system data flows
Strong understanding of Git workflows, branching strategies, semantic versioning, and release management
Excellent analytical, problem-solving, and technical communication skills
U.S. citizenship required
Active DoD Secret clearance required; TS/SCI eligibility preferred
One or more of the following (or equivalent demonstrated expertise): Azure DevOps Engineer Expert (AZ-400) or Azure Administrator Associate (AZ-104), Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD), CompTIA Security+ CE (or higher, to satisfy DoD 8140 baseline if applicable)

Nice To Haves

Experience with Azure DevOps service connections and agent pools in air-gapped or boundary-controlled DoD networks
Experience with Power Platform ALM (Application Lifecycle Management), solution packaging, and environment management in GCC High
Familiarity with GitOps practices (Flux, ArgoCD) in Government cloud environments
Experience implementing DoD Zero Trust Reference Architecture principles in CI/CD and deployment pipelines
Knowledge of EO 14028 software supply chain security requirements (SBOM generation, provenance attestation)
Experience with Azure Policy, Defender for Cloud, and compliance automation in AzureGov
Familiarity with NMCI and FlankSpeed application onboarding and deployment processes
Experience with database CI/CD (schema migration automation, data versioning)
Knowledge of IRIG-106 data standards and T&E range system integration patterns
Experience supporting FMS (Foreign Military Sales) program environments
Additional certifications: HashiCorp Terraform Associate, AWS DevOps Professional, Azure Solutions Architect Expert

Responsibilities

Design, implement, and maintain CI/CD pipelines in Azure DevOps (GCC High) for all team-developed applications, including AIDI tools, C2 experimentation software, knowledge management solutions, and Power Platform components
Architect and operate DevSecOps infrastructure including automated build, static/dynamic code analysis (SAST/DAST), container image scanning, unit/integration testing, and deployment automation across AzureGov IL4/IL5/IL6 environments
Engineer secure integration pathways and data flows between MS365 GCC High, AzureGov, NMCI, FlankSpeed, and Government range networks, ensuring compliance with boundary protection controls and cross-domain requirements
Implement and manage Infrastructure as Code (IaC) using Terraform, Bicep, or ARM templates for repeatable provisioning of AzureGov resources, including compute, networking, storage, and security configurations
Build and maintain container orchestration infrastructure (Azure Kubernetes Service / AKS on AzureGov, Docker) for microservices deployment, model serving, and application hosting
Establish and enforce branch strategies, code review workflows, artifact versioning, and release management processes aligned with R&D configuration management requirements (CDRL A006)
Automate STIG compliance checking and hardening within CI/CD pipelines, ensuring that deployed infrastructure and applications meet DISA STIG baselines before promotion to test/production environments
Integrate automated vulnerability scanning (container images, dependencies, IaC templates) into pipelines to support continuous security posture aligned with RMF and POA&M requirements
Support integration of Power Platform solutions (Power Apps, Power Automate, Copilot Studio) with Azure backend services, ensuring proper ALM (Application Lifecycle Management) and environment management in GCC High
Design and implement API integrations, webhook architectures, and service bus patterns for cross-system data exchange supporting business processes, staffing workflows, and knowledge management tools
Develop monitoring, alerting, and observability infrastructure (Azure Monitor, Application Insights, Log Analytics in GCC High) for deployed applications and pipelines
Maintain pipeline and integration documentation including architecture diagrams, runbooks, and integration interface control documents (ICDs) as CDRL A006 deliverables
Support the Integration Plan (CDRL A016) by providing automated validation and checkout capabilities for prototype system configurations
Collaborate with cybersecurity personnel to ensure DevSecOps infrastructure meets RMF, STIG, and continuous monitoring requirements for R&D test environments
Stay current on AzureGov service availability, GCC High feature parity, and emerging DevSecOps practices for DoD environments