Senior DevSecOps Engineer

Peraton • Reston, VA

1d

About The Position

Peraton is seeking a Senior DevSecOps Engineer to help build and operate its Agentic AI platform across delivery, infrastructure, runtime operations, and platform health. The role contributes to secure, reliable, and scalable platform delivery, spanning CI/CD pipelines and automated testing through EKS cluster operations, AWS infrastructure, monitoring, alerting, and synthetic health checks.

The engineer will take ownership of meaningful areas of the platform while collaborating with senior DevSecOps and platform engineers. The position calls for strong technical execution, operational discipline, and sound judgment in designing systems that are supportable, observable, secure, and audit-ready. The work will help shape how advanced AI-enabled capabilities are delivered securely, compliantly, and in production.

Requirements

• Bachelor's degree with 12 years of professional experience, Associate's degree with 14 years, master's degree with 10 years, or high school diploma/equivalent with 16 years.
• Hands-on experience building and maintaining CI/CD pipelines in GitHub Actions, GitLab CI, or comparable systems, including pipeline-as-code, reusable workflows, and integrated quality/security gates.
• Production experience operating Kubernetes, ideally Amazon EKS, including cluster upgrades, RBAC, Helm-based deployments, and workload troubleshooting.
• Practical AWS experience with core services including VPC, IAM, S3, RDS, CloudTrail, and KMS.
• Infrastructure-as-code experience with OpenTofu, Terraform, or comparable tools, including writing modules, managing state, and driving changes through code review.
• Experience implementing and tuning monitoring, logging, and alerting using CloudWatch, Prometheus/Grafana, or equivalent tooling.
• Familiarity with identity and access management patterns, including SSO/SAML/OIDC integration, RBAC, and provisioning/deprovisioning workflows.
• Experience integrating security testing into delivery pipelines, such as SAST, DAST, SCA, secrets scanning, or dependency scanning, and driving findings to closure.
• Solid scripting and automation skills in Python, Go, Bash, or comparable languages.
• Working knowledge of secrets management, least-privilege design, and software supply chain integrity practices.
• Comfort with trunk-based development, merge-request-driven change, and automated release quality controls.
• Clear written and verbal communication skills, including the ability to document runbooks, write actionable alerts, and coordinate with security, program, and customer stakeholders.
• U.S. citizenship required.
• Ability to obtain and maintain a Public Trust clearance.

Nice To Haves

• Experience operating Amazon EKS at scale, including add-on lifecycle, node group strategy, pod identity, and IRSA.
• GitOps experience with ArgoCD, Flux, or comparable tools.
• Experience with DAST and runtime security tools such as OWASP ZAP, Burp Suite, Nuclei, or equivalent.
• Experience implementing SLIs/SLOs and error-budget-driven operational practices.
• Experience building synthetic and transactional monitoring for real authentication flows and critical user journeys.
• Familiarity with IAVM tracking, vulnerability remediation workflows, and evidence generation for compliance reporting.
• Exposure to policy-as-code frameworks such as OPA/Rego, Kyverno, or Conftest.
• Experience with software supply chain integrity, including SBOM generation, image signing (Cosign/Sigstore), and SLSA provenance.
• Experience supporting FedRAMP, NIST 800-53, RMF, or comparable federal compliance environments.
• Exposure to distributed tracing and modern observability stacks such as OpenTelemetry, Loki, Tempo, or ELK.
• Active security clearance or eligibility.
• Relevant certifications such as CKA/CKS, AWS Solutions Architect/Security, or Terraform Associate.
• Prior experience supporting AI/ML or Agentic AI platforms in production.

Responsibilities

• Operate the Agentic AI platform across CI/CD, cloud infrastructure, Kubernetes operations, observability, and runtime reliability.
• Build and maintain secure, repeatable CI/CD pipelines using GitHub Actions, GitLab CI, or comparable systems.
• Implement and improve automated testing and quality gates, including build validation, integration checks, security testing, and deployment controls.
• Plan and execute releases and deployments, including coordinating change windows, managing release artifacts, running deployment automation, validating post-deployment health, and supporting rollback procedures.
• Support operational ownership of Amazon EKS and Kubernetes environments, including cluster lifecycle activities, upgrades, troubleshooting, RBAC, Helm-based deployments, pod identity, and GitOps-aligned workflows.
• Build and maintain AWS infrastructure for platform and application needs using services such as VPC, IAM, S3, RDS, CloudTrail, and KMS.
• Contribute to infrastructure provisioning and lifecycle management using OpenTofu, Terraform, and related infrastructure-as-code practices.
• Administer platform user management, including identity provider integration, role-based access control, provisioning and deprovisioning workflows, and periodic access reviews.
• Help design and operate monitoring, logging, and alerting using CloudWatch, Prometheus/Grafana, or equivalent tooling.
• Assess system logs for anomalies, configuration drift, misuse, and security-relevant events; triage findings and coordinate remediation with senior engineers and the customer security team.
• Develop actionable alerts, service health indicators, and SLO-aligned operational thresholds.
• Build and maintain synthetic and transactional monitoring for authentication flows, user journeys, and critical service transactions.
• Track and remediate IAVM notices and other vulnerability advisories, maintain inventory accuracy, drive patching to closure, and produce compliance evidence.
• Implement and maintain DAST and runtime security testing in delivery pipelines.
• Support security-focused CI/CD practices, including secrets management, least privilege, software supply chain integrity, and audit evidence generation.
• Apply trunk-based development, merge-request-driven change, and automated release quality controls.

Benefits

• Medical, dental, and vision benefits.
• Life insurance.
• Health savings account.
• Short- and long-term disability.
• Employee Assistance Program (EAP).
• Parental leave.
• 401(k).
• Paid time off (PTO) for vacation.
• Company-paid holidays.
• Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior