Senior DevSecOps Engineer

Peraton • Reston, VA

1d • $146,000 - $234,000 • Onsite

About The Position

Peraton is seeking a Senior DevSecOps Engineer to help build and operate its Agentic AI platform across delivery, infrastructure, runtime operations, and platform health. The role contributes to a secure, reliable, scalable, supportable, observable, and audit-ready technical backbone, working alongside senior DevSecOps and platform engineers while taking ownership of meaningful areas of the platform. The position is based in Reston, Virginia.

The engineer will support CI/CD pipelines and automated testing, Amazon EKS and Kubernetes operations, AWS infrastructure, monitoring and alerting, synthetic health checks, user identity and access administration, and vulnerability remediation. The role also applies security-focused delivery practices and helps ensure that platform capabilities are delivered in secure, compliant, and production-ready ways.

Requirements

• Bachelor's degree and 12 years of professional experience, or an associate's degree and 14 years, or a master's degree and 10 years, or a high school diploma/equivalent and 16 years.
• Hands-on experience building and maintaining CI/CD pipelines in GitHub Actions, GitLab CI, or comparable systems, including pipeline-as-code, reusable workflows, and integrated quality/security gates.
• Production experience operating Kubernetes, ideally Amazon EKS, including cluster upgrades, RBAC, Helm deployments, and workload troubleshooting.
• Practical AWS experience with core services including VPC, IAM, S3, RDS, CloudTrail, and KMS.
• Infrastructure-as-code experience with OpenTofu, Terraform, or comparable tools, including writing modules, managing state, and driving changes through code review.
• Experience implementing and tuning monitoring, logging, and alerting with CloudWatch, Prometheus/Grafana, or equivalent tools.
• Familiarity with identity and access management patterns, including SSO/SAML/OIDC integration, RBAC, and provisioning/deprovisioning workflows.
• Experience integrating security testing into delivery pipelines, such as SAST, DAST, SCA, secrets scanning, or dependency scanning, and driving findings to closure.
• Solid scripting and automation skills in Python, Go, Bash, or comparable languages.
• Working knowledge of secrets management, least-privilege design, and software supply chain integrity practices.
• Comfort with trunk-based development, merge-request-driven change, and automated release quality controls.
• Clear written and verbal communication skills, including documenting runbooks, writing actionable alerts, and coordinating with security, program, and customer stakeholders.
• U.S. citizenship required.
• Ability to obtain and maintain a Public Trust clearance.

Nice To Haves

• Experience operating Amazon EKS at scale, including add-on lifecycle, node group strategy, pod identity, and IRSA.
• GitOps experience with ArgoCD, Flux, or comparable tools.
• Experience with DAST and runtime security tools such as OWASP ZAP, Burp Suite, Nuclei, or equivalent.
• Experience implementing SLIs/SLOs and error-budget-driven operational practices.
• Experience building synthetic and transactional monitoring for real authentication flows and critical user journeys.
• Familiarity with IAVM tracking, vulnerability remediation workflows, and compliance evidence generation.
• Exposure to policy-as-code frameworks such as OPA/Rego, Kyverno, or Conftest.
• Experience with software supply chain integrity, including SBOM generation, image signing with Cosign/Sigstore, and SLSA provenance.
• Experience supporting FedRAMP, NIST 800-53, RMF, or comparable federal compliance environments.
• Experience with distributed tracing and modern observability stacks such as OpenTelemetry, Loki, Tempo, or ELK.
• Active security clearance or eligibility.
• Relevant certifications such as CKA/CKS, AWS Solutions Architect/Security, or Terraform Associate.
• Prior experience supporting AI/ML or Agentic AI platforms in production.

Responsibilities

• Help operate the Agentic AI platform across CI/CD, cloud infrastructure, Kubernetes operations, observability, and runtime reliability.
• Build and maintain CI/CD pipelines using GitHub Actions, GitLab CI, or comparable systems.
• Implement and improve automated testing and quality gates, including build validation, integration checks, security testing, and deployment controls.
• Plan and execute releases and deployments, including coordinating change windows, managing release artifacts, running deployment automation, validating post-deployment health, and supporting rollback procedures.
• Support operational ownership of Amazon EKS and Kubernetes environments, including cluster lifecycle activities, upgrades, troubleshooting, RBAC, Helm deployments, pod identity, and GitOps-aligned workflows.
• Build and maintain AWS infrastructure for platform and application needs, including VPC, IAM, S3, RDS, CloudTrail, and KMS.
• Contribute to infrastructure provisioning and lifecycle management using OpenTofu, Terraform, or related infrastructure-as-code practices.
• Administer platform user management, including identity provider integration, SSO/SAML/OIDC, RBAC, provisioning and deprovisioning, and periodic access reviews.
• Help design and operate monitoring, logging, and alerting using CloudWatch, Prometheus/Grafana, or equivalent tools.
• Assess system logs for anomalies, configuration drift, misuse, and security-relevant events; triage findings and coordinate remediation with senior engineers and the customer security team.
• Develop actionable alerts, service health indicators, and SLO-aligned operational thresholds to support triage and resilient service delivery.
• Build and maintain synthetic and transactional monitoring that exercises authentication flows, user journeys, and critical service transactions.
• Track and remediate IAVM notices and other vulnerability advisories, maintain inventory accuracy, drive patching to closure, and produce compliance reporting evidence.
• Implement and maintain DAST and runtime security testing in delivery pipelines using tools such as OWASP ZAP, Burp, Nuclei, or equivalent.
• Support security-focused CI/CD practices, including secrets management, least privilege, software supply chain integrity, and audit evidence generation.
• Apply modern engineering delivery patterns, including trunk-based development, merge-request-driven change, and automated release quality controls.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Health savings account
• Short- and long-term disability
• Employee assistance program (EAP)
• Parental leave
• 401(k)
• Paid time off (PTO) for vacation
• Company-paid holidays
• Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior