Senior DevOps Engineer

Expression•Washington, DC

5d•Hybrid

About The Position

Expression is seeking a Senior DevOps Engineer to serve as the DevOps lead for the National Telecommunications and Information Administration (NTIA) Federal Spectrum Data Systems (FSDS) program within the U.S. Department of Commerce. FSDS supports modernization of federal spectrum management systems through improved technology, automation, data integration, and interoperability. The systems help NTIA manage federal spectrum use and support essential government missions. The role designs, implements, and maintains secure cloud infrastructure and delivery pipelines for applications, data services, and analytics across Azure Commercial, Government, and Secret cloud environments. The engineer works with government stakeholders, software engineers, system administrators, data engineers, and security personnel to move capabilities into production and keep them secure, reliable, and maintainable. The role owns work from infrastructure code through production deployment, creates dependable automation and documentation, and helps develop newer engineers while establishing DevOps practices for the program. The position is based in Washington, DC, with three days per week on-site. An active Secret clearance or higher is required.

Requirements

Active Secret security clearance or higher.
Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
Bachelor’s degree in Computer Science, Engineering, or a related field and five or more years of relevant DevOps/cloud engineering experience, or eight or more years of relevant experience in lieu of a degree.
Hands-on experience designing and operating infrastructure in Azure Commercial and Azure Government.
Experience building and maintaining Azure DevOps YAML pipelines for automated builds, testing, and deployments.
Experience delivering software or infrastructure in classified or similarly restricted federal environments.
Proficiency with Infrastructure as Code, including Terraform, Bicep, ARM templates, or comparable tools.
Practical experience with Docker, Kubernetes, and Helm, including deployment and troubleshooting.
Strong scripting skills using Python, PowerShell, Bash, or similar languages.
Experience with Git-based version control, branching strategies, pull requests, and code reviews, including reviewing and guiding junior engineers’ work.
Working knowledge of Linux administration, cloud networking, identity and access management, and secrets management.
Ability to troubleshoot across infrastructure and application layers, document solutions clearly, and work effectively with technical and nontechnical stakeholders, including government customers.

Nice To Haves

Experience supporting Azure Government Secret environments.
Experience leading DevOps efforts on federal system modernization programs, including production transitions.
Familiarity with NIST SP 800-53 controls, RMF, ATO processes, and STIG implementation.
Experience integrating security tools such as Nessus, SonarQube, Microsoft Defender for Cloud, Aqua Security, or comparable products.
Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
Experience supporting database platforms or search services such as SQL Server, PostgreSQL, Elasticsearch, or OpenSearch.
Familiarity with data engineering and machine learning platforms, including Databricks, Apache Spark, or related technologies.
Relevant Microsoft Azure administration, DevOps, or security certifications.

Responsibilities

Lead the design, deployment, and maintenance of Azure infrastructure supporting unclassified and classified spectrum management systems.
Develop reusable Infrastructure as Code using Terraform, Bicep, ARM templates, or comparable tools.
Configure and maintain container platforms using Kubernetes, Docker, and Helm.
Implement secure networking, identity and access controls, secrets management, and environment configuration.
Improve infrastructure consistency, scalability, reliability, and cost efficiency across development, test, and production environments.
Build and maintain Azure DevOps pipelines that automate application builds, testing, security scanning, and deployments.
Integrate code, dependency, container image, and infrastructure security checks into delivery workflows.
Establish repeatable release processes, approval controls, and artifact management.
Support deployments in restricted environments, accounting for connectivity, tooling, and software dependency constraints.
Partner with development teams to resolve deployment issues, improve delivery speed and quality, and promote consistent DevOps practices.
Implement and maintain technical controls aligned with applicable Department of Commerce, NTIA, and federal security requirements.
Apply secure configuration baselines and STIGs where required, and identify and remediate infrastructure and application vulnerabilities.
Support RMF, ATO, and continuous monitoring activities through technical documentation, configuration evidence, and remediation tracking.
Work with government and program security personnel to translate control requirements into practical infrastructure and pipeline safeguards.
Implement monitoring, centralized logging, and actionable alerts for infrastructure, containers, pipelines, and applications.
Troubleshoot production issues, support incident response, and address root causes.
Develop and validate backup, recovery, and rollback procedures.
Maintain architecture diagrams, deployment documentation, and operational runbooks.
Brief government stakeholders on infrastructure status, risks, and recommendations.
Review and guide the work of junior engineers.