Sr. DevOps (8-12 yrs)

Advanced Space•Westminster, CO

6h•$140,000 - $182,000•Onsite

About The Position

Advanced Space is seeking a Senior DevOps Engineer to design, build, automate, and operate secure, scalable infrastructure supporting mission-critical aerospace workloads. The role partners with engineering teams to deliver cloud infrastructure, Kubernetes platforms, CI/CD pipelines, and automation for reliable software delivery across development, test, and production environments. The engineer will build highly available AWS infrastructure and reusable infrastructure-as-code modules; develop CI/CD and Kubernetes platforms; maintain advanced networking across multi-account AWS environments, including AWS GovCloud (US); and strengthen identity, security, and compliance through DevSecOps practices. The role also develops Python-based automation and internal tooling, establishes observability, troubleshoots complex platform issues, and supports incident response and root-cause analysis. The position provides technical leadership by enabling engineering teams with self-service platform capabilities, standards, documentation, and secure-by-default patterns. It includes mentoring engineers and contributing to architecture reviews and platform roadmaps. Applicants must be U.S. citizens and able to obtain and maintain a Top Secret security clearance; visa sponsorship is not available.

Requirements

8–12 years of progressively responsible experience in DevOps, platform engineering, site reliability engineering, cloud infrastructure, or a closely related discipline.
Strong hands-on experience designing and operating production workloads in AWS.
Experience delivering infrastructure through Terraform, AWS CDK, CloudFormation, or comparable infrastructure-as-code tools.
Experience building, maintaining, and troubleshooting GitLab CI/CD pipelines or comparable CI/CD platforms.
Production Kubernetes experience, including containerized workloads, networking, RBAC, resource management, deployment strategies, and operational troubleshooting.
Advanced AWS networking knowledge, including VPC design, subnetting, route tables, security groups, network ACLs, DNS, load balancers, private connectivity, and multi-account networking.
Understanding of federated identity and access management, including SAML, OIDC, OAuth 2.0, MFA, role-based access control, and least-privilege IAM design.
Hands-on experience integrating or administering an identity provider such as Okta, Keycloak, Authentik, or an equivalent enterprise identity platform.
Proficiency in Python, including object-oriented programming, automated testing, API integrations, and maintainable automation or platform tooling; Bash and boto3 experience expected.
Experience applying infrastructure and application security practices, including IAM, encryption and KMS, secrets management, vulnerability management, centralized logging, monitoring, and security automation.
Strong Linux and Git fundamentals.
Ability to communicate technical decisions, risks, and tradeoffs effectively with engineers, program stakeholders, and customers.
Must be a U.S. citizen and able to obtain and maintain a Top Secret security clearance.

Nice To Haves

Hands-on Terraform and/or AWS CDK experience is strongly preferred.
Experience with Amazon EKS, Docker, and Helm.
Experience designing, deploying, or operating workloads in AWS GovCloud (US).
Experience in regulated, government, civil-space, national-security, or defense-adjacent environments.
Experience with compliance-oriented cloud operations involving FedRAMP, FISMA, NIST SP 800-53, DoD SRG, ITAR, CJIS, or CIS AWS Foundations Benchmark controls.
Experience with AWS Organizations, multi-account landing zones, Service Control Policies, cross-account roles, centralized logging, AWS Config, GuardDuty, Security Hub, CloudTrail, and VPC Flow Logs.
Experience with policy-as-code or Kubernetes admission controls using OPA/Gatekeeper, Kyverno, or equivalent technologies.
Experience with GitOps practices and tools such as Argo CD or Flux.
Experience with infrastructure monitoring and observability tools such as CloudWatch, Prometheus, Grafana, OpenTelemetry, ELK/OpenSearch, or similar platforms.
Experience with incident management, disaster recovery planning, backup and restore automation, and defining or validating RPOs and RTOs.
AWS Certified DevOps Engineer – Professional, AWS Certified Security – Specialty, AWS Certified Advanced Networking – Specialty, or AWS Certified Solutions Architect – Professional certification.
Bachelor’s degree in computer science, engineering, information systems, or a related field, or equivalent practical experience.

Responsibilities

Design, build, automate, and operate secure, scalable, highly available AWS infrastructure for mission-critical aerospace workloads.
Develop reusable infrastructure-as-code modules and deployment workflows using Terraform, AWS CDK, or comparable tools.
Build and improve GitLab CI/CD pipelines for repeatable software and infrastructure delivery.
Operate Kubernetes platforms, preferably Amazon EKS, including workload deployment, Helm, scaling, cluster upgrades, access controls, and security hardening.
Implement AWS networking architectures across multi-account environments, including VPCs, routing, security groups, network ACLs, DNS, load balancing, private connectivity, VPC endpoints, Transit Gateway, Direct Connect, and site-to-site VPNs.
Support AWS GovCloud (US) environments and their deployment and service requirements.
Implement federated identity and access management using SAML, OIDC, OAuth 2.0, AWS IAM Identity Center, and enterprise identity providers.
Apply DevSecOps practices, including least-privilege access, secrets management, encryption, policy enforcement, vulnerability scanning, automated compliance checks, and auditable change control.
Develop Python-based automation, internal tooling, API integrations, and operational utilities.
Establish observability through metrics, logs, traces, alerting, dashboards, and runbooks.
Troubleshoot infrastructure, networking, identity management, Kubernetes, and CI/CD issues; support incident response and root-cause analysis.
Partner with engineering teams to deliver self-service platform capabilities, clear standards, practical documentation, and secure-by-default patterns.
Mentor engineers, contribute to architecture reviews and platform roadmaps, and improve infrastructure reliability, security, and scalability.