Senior DevOps Engineer

Hatch IT•Washington, DC

4d•$150,000 - $175,000•Hybrid

About The Position

Expression is seeking an experienced Senior DevOps Engineer to support the National Telecommunications and Information Administration (NTIA) Federal Spectrum Data Systems (FSDS) program within the U.S. Department of Commerce. The program modernizes federal spectrum management systems through improved technology, automation, data integration, and interoperability. As the program’s DevOps lead, you will design, implement, and maintain secure cloud infrastructure and delivery pipelines for applications, data services, and analytics across Azure Commercial, Government, and Secret cloud environments. You will collaborate with government stakeholders, software engineers, system administrators, data engineers, and security personnel to bring capabilities into production and keep them secure, reliable, and maintainable. You will own work from infrastructure code through production deployment, provide dependable automation and documentation, help develop newer engineers, and set DevOps standards for the program. The position is based in Washington, DC, with on-site work three days per week. An active Secret clearance or higher is required.

Requirements

Active Secret security clearance or higher.
Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
Bachelor’s degree in Computer Science, Engineering, or a related field and five or more years of relevant DevOps/cloud engineering experience, or eight or more years of relevant experience in lieu of a degree.
Hands-on experience designing and operating infrastructure in Azure Commercial and Azure Government.
Experience building and maintaining Azure DevOps YAML pipelines for automated builds, testing, and deployments.
Experience delivering software or infrastructure in classified or similarly restricted federal environments.
Proficiency with Infrastructure as Code, including Terraform, Bicep, ARM templates, or comparable tools.
Practical experience with Docker, Kubernetes, and Helm, including deployment and troubleshooting.
Strong scripting skills using Python, PowerShell, Bash, or similar languages.
Experience with Git-based version control, branching strategies, pull requests, and code reviews.
Working knowledge of Linux administration, cloud networking, identity and access management, and secrets management.
Ability to troubleshoot across infrastructure and application layers, document solutions clearly, and work effectively with technical and nontechnical stakeholders, including government customers.

Nice To Haves

Experience supporting Azure Government Secret environments.
Experience leading DevOps efforts on federal system modernization programs, including production transitions.
Familiarity with NIST SP 800-53 controls, RMF, ATO processes, and STIG implementation.
Experience integrating security tools such as Nessus, SonarQube, Microsoft Defender for Cloud, Aqua Security, or comparable products.
Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
Experience supporting database platforms or search services such as SQL Server, PostgreSQL, Elasticsearch, or OpenSearch.
Familiarity with data engineering and machine learning platforms, including Databricks, Apache Spark, or related technologies.
Relevant Microsoft Azure administration, DevOps, or security certifications.

Responsibilities

Lead the design, deployment, and maintenance of Azure infrastructure supporting unclassified and classified spectrum management systems.
Develop reusable Infrastructure as Code using Terraform, Bicep, ARM templates, or comparable tools.
Configure and maintain container platforms using Kubernetes, Docker, and Helm.
Implement secure networking, identity and access controls, secrets management, and environment configuration.
Improve infrastructure consistency, scalability, reliability, and cost efficiency across development, test, and production environments.
Build and maintain Azure DevOps pipelines that automate application builds, testing, security scanning, and deployments.
Integrate code, dependency, container image, and infrastructure security checks into delivery workflows.
Establish repeatable release processes, approval controls, and artifact management.
Support deployments in restricted environments, accounting for connectivity, tooling, and software dependency constraints.
Partner with development teams to resolve deployment issues, improve delivery speed and quality, and promote consistent DevOps practices.
Implement and maintain technical controls aligned with applicable Department of Commerce, NTIA, and federal security requirements.
Apply secure configuration baselines and STIGs where required, and identify and remediate infrastructure and application vulnerabilities.
Support RMF, ATO, and continuous monitoring activities through technical documentation, configuration evidence, and remediation tracking.
Work with government and program security personnel to translate control requirements into practical infrastructure and pipeline safeguards.
Implement monitoring, centralized logging, and actionable alerts for infrastructure, containers, pipelines, and applications.
Troubleshoot production issues, support incident response, and address root causes.
Develop and validate backup, recovery, and rollback procedures.
Maintain architecture diagrams, deployment documentation, and operational runbooks, and brief government stakeholders on infrastructure status, risks, and recommendations.
Review and guide the work of junior engineers.