Senior DevOps Engineer

Expression•Washington, DC

6d•Hybrid

About The Position

Expression is seeking a Senior DevOps Engineer to serve as the DevOps lead for the National Telecommunications and Information Administration (NTIA) Federal Spectrum Data Systems (FSDS) program within the U.S. Department of Commerce. The program modernizes federal spectrum management systems through improved technology, automation, data integration, and interoperability. The role designs, implements, and maintains secure cloud infrastructure and delivery pipelines supporting applications, data services, and analytics across Azure Commercial, Government, and Secret cloud environments. The engineer works with government stakeholders, software engineers, system administrators, data engineers, and security personnel to move capabilities into production and keep them secure, reliable, and maintainable. The position also helps develop newer engineers and establishes DevOps practices for the program. The position is based in Washington, DC, with three days per week on-site, and requires an active Secret clearance or higher.

Requirements

Active Secret security clearance or higher.
Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
Bachelor’s degree in Computer Science, Engineering, or a related field and at least five years of relevant DevOps/cloud engineering experience, or at least eight years of relevant experience in lieu of a degree.
Hands-on experience designing and operating infrastructure in Azure Commercial and Azure Government.
Experience building and maintaining Azure DevOps YAML pipelines for automated builds, testing, and deployments.
Experience delivering software or infrastructure in classified or similarly restricted federal environments.
Proficiency with Infrastructure as Code, including Terraform, Bicep, ARM templates, or comparable tools.
Practical experience deploying and troubleshooting Docker, Kubernetes, and Helm.
Strong scripting skills using Python, PowerShell, Bash, or similar languages.
Experience with Git-based version control, branching strategies, pull requests, and code reviews, including reviewing and guiding junior engineers' work.
Working knowledge of Linux administration, cloud networking, identity and access management, and secrets management.
Ability to troubleshoot across infrastructure and application layers, document solutions clearly, and work effectively with technical and nontechnical stakeholders, including government customers.

Nice To Haves

Experience supporting Azure Government Secret environments.
Experience leading DevOps efforts on federal system modernization programs, including production transitions.
Familiarity with NIST SP 800-53 controls, RMF, ATO processes, and STIG implementation.
Experience integrating security tools such as Nessus, SonarQube, Microsoft Defender for Cloud, Aqua Security, or comparable products.
Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
Experience supporting database platforms or search services such as SQL Server, PostgreSQL, Elasticsearch, or OpenSearch.
Familiarity with data engineering and machine learning platforms, including Databricks, Apache Spark, or related technologies.
Relevant Microsoft Azure administration, DevOps, or security certifications.

Responsibilities

Lead the design, deployment, and maintenance of Azure infrastructure for unclassified and classified spectrum management systems.
Develop reusable Infrastructure as Code using Terraform, Bicep, ARM templates, or comparable tools.
Configure and maintain container platforms using Kubernetes, Docker, and Helm.
Implement secure networking, identity and access controls, secrets management, and environment configuration.
Improve infrastructure consistency, scalability, reliability, and cost efficiency across development, test, and production environments.
Build and maintain Azure DevOps pipelines to automate application builds, testing, security scanning, and deployments.
Integrate code, dependency, container image, and infrastructure security checks into delivery workflows.
Establish repeatable release processes, approval controls, and artifact management.
Support deployments in restricted environments, accounting for connectivity, tooling, and software dependency constraints.
Partner with development teams to resolve deployment issues, improve delivery speed and quality, and promote consistent DevOps practices.
Implement and maintain technical controls aligned with applicable Department of Commerce, NTIA, and federal security requirements.
Apply secure configuration baselines and STIGs where required, and identify and remediate infrastructure and application vulnerabilities.
Support RMF, ATO, and continuous monitoring through technical documentation, configuration evidence, and remediation tracking.
Work with government and program security personnel to translate control requirements into infrastructure and pipeline safeguards.
Implement monitoring, centralized logging, and actionable alerts for infrastructure, containers, pipelines, and applications.
Troubleshoot production issues, support incident response, and address root causes.
Develop and validate backup, recovery, and rollback procedures.
Maintain architecture diagrams, deployment documentation, and operational runbooks.
Brief government stakeholders on infrastructure status, risks, and recommendations.
Own work from infrastructure code through production deployment and provide dependable automation and documentation.
Review and guide junior engineers' work and help them develop their skills.