Senior DevSecOps / Platform Engineer

Peraton•,

6d•$112,000 - $179,000

About The Position

Peraton Labs is seeking a Senior DevSecOps / Platform Engineer to own its Agentic AI platform end-to-end across delivery, infrastructure, runtime operations, and platform health. The engineer will build and operate the technical backbone for secure, reliable, and scalable platform delivery, including CI/CD pipelines, automated testing, EKS cluster operations, AWS infrastructure, monitoring, alerting, and synthetic health checks. The role calls for deep technical execution, sound operational judgment, and a builder mindset. The engineer will design systems that are supportable, observable, secure, and audit-ready, and will help improve platform resilience and deliver advanced AI-enabled capabilities in secure, compliant, production-ready ways.

Requirements

Minimum of a bachelor’s degree with 8+ years of experience, a master’s degree with 6+ years of experience, or a Ph.D. with 3+ years of experience in platform engineering, DevOps, SRE, or closely related infrastructure engineering roles.
Deep CI/CD experience with GitHub Actions and/or GitLab CI.
Strong hands-on background operating Amazon EKS/Kubernetes environments.
Senior-level AWS experience across core services including VPC, IAM, S3, RDS, CloudTrail, and KMS.
Strong experience building and operating monitoring, logging, and alerting solutions at scale using CloudWatch, Prometheus/Grafana, or equivalent.
Hands-on infrastructure-as-code experience using OpenTofu/Terraform.
Experience supporting agile delivery models, including trunk-based development, merge-request-driven change, and automated quality gates.
Strong security and compliance engineering foundation, including secrets management, least privilege, supply chain integrity, and audit evidence support.
Experience implementing automated testing in CI/CD pipelines.
Experience running DAST and security testing against live services in pipeline workflows, including triage and gating of findings alongside SAST/SCA results.
Experience building synthetic and transactional monitoring, including scripted health checks that validate real authentication flows and critical transactions.
Strong troubleshooting, systems thinking, and operational ownership mindset.
U.S. citizenship is required.

Nice To Haves

Experience implementing BigBang/Platform One.
Familiarity with Iron Bank, Sigstore/Cosign, and hardened image pipeline practices.
Prior experience supporting systems pursuing or maintaining an ATO.
Experience with contract testing such as PACT.
Experience with chaos engineering concepts or tooling.
Experience with progressive delivery approaches such as canary or blue/green deployments, with automated rollback based on health-check failure.
Experience working in regulated or mission environments aligned to NIST 800-171, CMMC, FedRAMP, or DoD security expectations.
Background helping mature platform reliability and security in cloud-native environments supporting sensitive workloads.

Responsibilities

Own and operate the Agentic AI platform across CI/CD, cloud infrastructure, Kubernetes operations, observability, and runtime reliability.
Design, build, and maintain secure, repeatable, and efficient CI/CD pipelines using GitHub Actions and/or GitLab CI.
Implement and improve automated testing and quality gates, including build validation, integration checks, security testing, and deployment controls.
Lead operational ownership of Amazon EKS/Kubernetes environments, including cluster lifecycle management, upgrades, troubleshooting, RBAC, Helm-based deployments, pod identity, and GitOps-aligned workflows.
Build and maintain AWS infrastructure supporting platform and application needs, including VPC, IAM, S3, RDS, CloudTrail, and KMS.
Provision and manage infrastructure lifecycles using OpenTofu/Terraform and related infrastructure-as-code practices.
Design and operate monitoring, logging, and alerting using CloudWatch, Prometheus/Grafana, or equivalent tooling.
Develop actionable alerts, service health indicators, and SLO-aligned operational thresholds to support rapid triage and resilient service delivery.
Build and maintain synthetic and transactional monitoring that exercises real authentication flows, user journeys, and critical service transactions.
Implement and maintain DAST and runtime security testing in delivery pipelines using OWASP ZAP, Burp, Nuclei, or equivalent tools.
Support security-focused CI/CD practices, including secrets management, least privilege, software supply chain integrity, and audit evidence generation.
Drive modern engineering delivery patterns such as trunk-based development, merge-request-driven change, and automated release quality controls.