Senior Engineer

Raft Company Website•Tampa, FL

4d•$120,000 - $210,000•Hybrid

About The Position

Raft is hiring a Senior DevOps Engineer to help secure, deploy, and operate mission-critical data, AI, and operational platforms, including [R]DP, [R]AP, [R]AIMS, and Raft’s MLOps workflows. The role spans cloud-hosted development environments and classified, on-premises, disconnected, and edge deployments, with a focus on reliability, security, and repeatability. The engineer will work with platform, software, data, and security engineers, taking ownership of well-scoped work and growing toward broader platform ownership. The work includes Kubernetes infrastructure, CI/CD and GitOps, secure software delivery, observability, and support for data and MLOps workloads. Deployments may span AWS, Azure, data centers, and tactical environments. The position is hybrid in Tampa, Florida, and requires up to 30% travel. Applicants must be U.S. citizens, conduct all work within the continental United States, hold an active Secret clearance, and be eligible for and willing to obtain a TS/SCI clearance. Security+ certification must be obtained within the first 90 days of employment.

Requirements

At least 5 years of hands-on experience in DevSecOps, DevOps, platform engineering, cloud infrastructure, systems administration, cybersecurity engineering, or a closely related role.
Working familiarity with Linux, containers, Docker, and Kubernetes concepts, including pods, services, deployments, config maps, secrets, ingress, and basic troubleshooting.
Experience building, running, or supporting CI/CD pipelines; exposure to GitLab CI, GitHub Actions, Jenkins, Argo CD, Flux, or similar tools.
Exposure to Infrastructure as Code or configuration management using Terraform, Ansible, Helm, Kustomize, or similar tooling.
Understanding of foundational security practices, including least privilege, vulnerability management, container image scanning, secrets handling, secure configuration, and auditability.
Ability to read application logs, inspect runtime configuration, use command-line tooling, and follow evidence to root cause.
Basic scripting or programming ability in Go, Java, Python, Bash, or a comparable language.
Strong written communication and willingness to document work clearly for teammates, customers, and future operators.
Active Secret clearance; eligibility for and willingness to obtain a Top Secret/SCI clearance.
Ability to obtain Security+ certification within the first 90 days of employment.
Ability to travel up to 30%.
U.S. citizenship is required for eligibility for the supported programs; all work must be conducted within the continental U.S.

Nice To Haves

Interest in data platforms, streaming systems, MLOps, and operational AI/ML workloads; prior exposure to Kafka, Flink, KServe, Kubeflow, or Ray is a plus.
Hands-on experience deploying applications with Helm or Kustomize in a Kubernetes environment.
Exposure to GitOps workflows and continuous delivery across multiple environments.
Familiarity with AWS or Azure fundamentals, including IAM, networking, storage, compute, and managed Kubernetes services.
Exposure to service mesh technologies such as Istio, including mTLS, traffic routing, and observability concepts.
Familiarity with government delivery security and compliance frameworks, including RMF, STIGs, FedRAMP, NIST 800-53, and IL4/IL5/IL6 controls.
Experience supporting air-gapped, disconnected, classified, or resource-constrained deployments.
Exposure to SBOMs, SCA, SAST, DAST, container scanning, admission control, OPA/Gatekeeper, Kyverno, Sigstore, or similar supply chain security tooling.
Existing TS/SCI clearance.

Responsibilities

Implement, maintain, and troubleshoot Kubernetes-based platform infrastructure.
Build and maintain CI/CD and GitOps workflows using tools such as GitLab CI, Argo CD, Flux, Helm, and repository-managed deployment configuration.
Support secure software delivery practices, including container hardening, vulnerability scanning, image provenance checks, secrets hygiene, and policy-driven deployment gates.
Help operate cloud, on-premises, and disconnected deployments across AWS, Azure, data centers, and tactical environments.
Deploy and debug services, Helm charts, service mesh configuration, Kubernetes networking and storage, and runtime behavior.
Support observability using Prometheus, Grafana, Fluent Bit, Loki, Kibana, OpenTelemetry, or similar tools.
Work with software and data engineers to understand service dependencies, data flows, and operational failure modes.
Support data and MLOps workloads, potentially including Kafka, Flink, Pinot, KServe, Kubeflow, Ray, GPU-enabled workloads, and model-serving workflows.
Write maintainable automation and small tools in Go, Java, Python, Bash, or similar languages to reduce manual effort and improve repeatability.
Contribute to compliance-driven delivery practices aligned with RMF, STIGs, NIST 800-53, IL4/IL5/IL6, and customer-specific security requirements.
Document operational procedures, deployment notes, troubleshooting steps, and lessons learned for reuse by other engineers.