Senior DevSecOps Platform Engineer

CGI•Baltimore, MD

About The Position

CGI is seeking a Senior DevSecOps Platform Engineer to build, evolve, and set direction for enterprise shared services platforms supporting development teams across a large federal organization. This is a hands-on role focused on assessing and improving a mature CI/CD ecosystem by designing, building, and shipping pipeline code, automation, and tooling. The platform includes dozens of interconnected codebases written in Go, Groovy, Java, Python, and Ansible, as well as PostgreSQL-backed services. The engineer will architect and evolve pipeline, automation, and platform capabilities that meet security, compliance, and release governance requirements. The position partners with development, platform, security, and leadership stakeholders, and is based in Woodlawn, Maryland. The role also provides technical leadership, mentorship, and escalation support for complex delivery and infrastructure issues.

Requirements

Ability to obtain and maintain a U.S. Public Trust Clearance.
Bachelor’s degree and at least 7 years of IT-related experience.
At least 5 years of experience in DevOps, DevSecOps, Platform Engineering, Site Reliability Engineering, or a related discipline.
Demonstrated ability to independently conceive, architect, and personally build significant platform, pipeline, or automation initiatives from concept through production adoption.
Currently hands-on writing and shipping pipeline code, automation, and tooling, with a record of clean, maintainable, well-tested code.
Ability to work with minimal direction, define problems, ask clarifying questions, propose solutions, and drive work to completion.
Deep hands-on experience designing and building CI/CD pipelines and reusable pipeline libraries or templates, such as Jenkins, GitLab CI, GitHub Actions, Azure DevOps, or Tekton.
Experience with container technologies such as Docker, Podman, or CRI-O and orchestration platforms such as Kubernetes or OpenShift.
Experience working in AWS or comparable cloud environments.
Production coding proficiency in at least two of Go, Groovy, Python, or Ansible, plus working knowledge of SQL and PostgreSQL.
Ability to quickly read, understand, and modify code and configuration in multiple languages and formats, including Groovy, Go, Python, Ansible, Helm templates, YAML, JSON, and shell.
Experience with Infrastructure as Code and configuration management solutions such as Terraform, CloudFormation, or Ansible.
Strong knowledge of application and software supply chain security, vulnerability management, CVE remediation, and DevSecOps practices.
Strong knowledge of Git-based source control, release flow and branching strategies and their tradeoffs, and collaborative development workflows.
Excellent troubleshooting, analytical, written, and verbal communication skills.

Nice To Haves

Experience as a hands-on technical lead or architect for enterprise platform engineering or shared services environments.
Experience automating release governance, change management, or approval workflows in regulated environments.
Experience building metrics collection, reporting, or dashboards to measure software delivery performance, such as DORA metrics.
Experience with artifact repositories and dependency management, such as Nexus or Artifactory.
Familiarity with Java-based web services, such as Spring Boot, to support and maintain platform components.
Experience applying AI-assisted or agentic development tools to engineering and operational workflows.
AWS, Kubernetes, Red Hat OpenShift, Terraform, or security-related certifications.
Experience with Agile software development methodologies.
Experience in federal, regulated, or compliance-driven environments.

Responsibilities

Serve as a senior technical authority for the organization’s CI/CD and platform engineering ecosystem, setting direction for enhancements, upgrades, and long-term strategy while contributing hands-on.
Evaluate current pipeline architecture and tooling, define target-state approaches, and deliver improvements through prototypes and production releases.
Architect, build, and evolve scalable enterprise CI/CD solutions using DevOps and GitOps practices, Pipeline as Code, reusable shared libraries, templated deployments, and automated quality, security, and approval gates.
Automate agency security, change management, and release approval requirements within the software delivery process.
Lead migrations and modernization from on-premises and self-hosted tooling to SaaS and cloud-native platforms, from tool selection and proof of concept through rollout and adoption.
Drive platform and dependency upgrades, reduce technical debt, and continuously improve shared tooling.
Create, harden, and deploy containerized workloads and deployment patterns on Kubernetes and OpenShift, including Helm packaging and GitOps delivery.
Define DevSecOps standards and implement them in pipelines and tooling, including SAST and SCA, container and image scanning, secrets management, RBAC, SBOM, and software supply chain security.
Architect and write Infrastructure as Code and configuration management solutions using Terraform, CloudFormation, Ansible, or similar technologies, including reusable modules and roles.
Stand up, automate, and operate workloads in AWS, including IAM, Fargate, ECR, S3, CloudWatch, and related services.
Learn and enhance interconnected tooling codebases written in Go, Groovy, Java, Python, and Ansible, including PostgreSQL-backed services.
Develop operational tooling, bots, and integrations using languages such as Python, Java, Node.js, Bash, and PowerShell to automate repetitive platform and remediation work.
Plan and implement metrics and observability using Prometheus, Grafana, ELK Stack, OpenSearch, CloudWatch, or similar tools to measure delivery performance and platform health.
Prototype and adopt emerging capabilities, including AI-assisted and agentic development tooling, where they provide measurable value.
Act as the escalation point for complex build, deployment, integration, and infrastructure issues, conducting root cause analysis and delivering durable fixes.
Translate business and governance needs into technical solutions and communicate tradeoffs to technical and non-technical stakeholders, including leadership.
Mentor engineers, review designs and code, and establish platform standards, documentation, and engineering best practices.