Sr. DevOps (8-12 yrs)

Advanced Space•Westminster, CO

6d•Onsite

About The Position

Advanced Space is seeking a Sr. DevOps Engineer to design, build, automate, and operate secure, scalable infrastructure supporting mission-critical aerospace workloads. The role partners with engineering teams to deliver cloud infrastructure, Kubernetes platforms, CI/CD pipelines, and automation for reliable software delivery across development, test, and production environments. The position is onsite and open to U.S. citizens only; visa sponsorship is unavailable. The ability to obtain and maintain a Top Secret security clearance is required. The engineer will build and operate AWS infrastructure, develop infrastructure-as-code and deployment workflows, maintain GitLab CI/CD pipelines and Kubernetes platforms, and design cloud networking across multi-account environments, including AWS GovCloud (US). The role also implements federated identity and access management and DevSecOps controls; develops Python-based automation and operational tooling; establishes observability; troubleshoots complex systems; supports incident response and root-cause analysis; and provides technical leadership, documentation, mentoring, and self-service platform capabilities. Advanced Space develops software, mission services, and technology solutions for sustainable space exploration. Its work includes ownership and operation of NASA's CAPSTONE mission and serving as Prime Contractor for AFRL's Oracle mission. The Sr. DevOps Engineer will help deliver secure, scalable platforms that support aerospace software and mission operations.

Requirements

8–12 years of progressively responsible experience in DevOps, platform engineering, site reliability engineering, cloud infrastructure, or a closely related discipline.
Strong hands-on experience designing and operating production workloads in AWS.
Experience delivering infrastructure through Terraform, AWS CDK, CloudFormation, or comparable infrastructure-as-code tools.
Experience building, maintaining, and troubleshooting GitLab CI/CD pipelines or comparable CI/CD platforms.
Production experience with Kubernetes, including containerized workloads, networking, RBAC, resource management, deployment strategies, and operational troubleshooting.
Advanced AWS networking knowledge, including VPC design, subnetting, route tables, security groups, network ACLs, DNS, load balancers, private connectivity, and multi-account networking.
Understanding of federated identity and access management, including SAML, OIDC, OAuth 2.0, MFA, role-based access control, and least-privilege IAM design.
Hands-on experience integrating or administering an identity provider such as Okta, Keycloak, Authentik, or an equivalent enterprise identity platform.
Proficiency in Python, including object-oriented programming, automated testing, API integrations, and maintainable automation or platform tooling.
Experience with Bash and boto3.
Experience applying infrastructure and application security practices, including IAM, encryption and KMS, secrets management, vulnerability management, centralized logging, monitoring, and security automation.
Strong Linux and Git fundamentals.
Ability to communicate technical decisions, risks, and tradeoffs effectively with engineers, program stakeholders, and customers.
U.S. citizenship and ability to obtain and maintain a Top Secret security clearance.
Ownership mindset and willingness to work with the team to solve challenges.

Nice To Haves

Hands-on Terraform and/or AWS CDK experience.
Experience with Amazon EKS, Docker, and Helm.
Experience designing, deploying, or operating workloads in AWS GovCloud (US).
Experience in regulated, government, civil-space, national-security, or defense-adjacent environments.
Experience with compliance-oriented cloud operations involving FedRAMP, FISMA, NIST SP 800-53, DoD SRG, ITAR, CJIS, or CIS AWS Foundations Benchmark controls.
Experience with AWS Organizations, multi-account landing zones, Service Control Policies, cross-account roles, centralized logging, AWS Config, GuardDuty, Security Hub, CloudTrail, or VPC Flow Logs.
Experience with policy-as-code or Kubernetes admission controls such as OPA/Gatekeeper, Kyverno, or equivalent technologies.
Experience with GitOps practices and tools such as Argo CD or Flux.
Experience with infrastructure monitoring and observability platforms such as CloudWatch, Prometheus, Grafana, OpenTelemetry, ELK/OpenSearch, or similar.
Experience with incident management, disaster recovery planning, backup and restore automation, and defining or validating recovery point objectives (RPOs) and recovery time objectives (RTOs).
AWS Certified DevOps Engineer – Professional, AWS Certified Security – Specialty, AWS Certified Advanced Networking – Specialty, or AWS Certified Solutions Architect – Professional certification.
A bachelor's degree in computer science, engineering, information systems, or a related field, or equivalent practical experience.

Responsibilities

Design, build, automate, and operate secure, scalable, highly available AWS infrastructure for mission-critical aerospace workloads.
Develop reusable infrastructure-as-code modules and deployment workflows using Terraform, AWS CDK, or comparable tools.
Build and improve GitLab CI/CD pipelines for repeatable software and infrastructure delivery.
Operate Kubernetes container platforms, preferably Amazon EKS, including workload deployment, Helm, scaling, cluster upgrades, access controls, and security hardening.
Implement AWS networking architectures across multi-account environments, including VPCs, routing, security groups, network ACLs, DNS, load balancing, private connectivity, VPC endpoints, Transit Gateway, Direct Connect, and site-to-site VPNs.
Support AWS GovCloud (US) environments and their deployment and service requirements.
Implement federated identity and access management using standards and enterprise identity providers.
Apply DevSecOps practices, including least-privilege access, secrets management, encryption, policy enforcement, vulnerability scanning, automated compliance checks, and auditable change control.
Develop Python-based automation, internal tooling, API integrations, and operational utilities using sound software engineering practices.
Establish observability through metrics, logs, traces, alerting, dashboards, and runbooks.
Troubleshoot infrastructure, networking, identity management, Kubernetes, and CI/CD issues; support incident response and root-cause analysis.
Partner with engineering teams to deliver self-service platform capabilities, standards, documentation, and secure-by-default patterns.
Mentor engineers, contribute to architecture reviews and platform roadmaps, and improve infrastructure reliability, security, and scalability.
Deliver secure, scalable, highly available AWS infrastructure and reliable CI/CD and infrastructure automation.
Operate secure, resilient Kubernetes platforms across development, test, and production environments.
Improve cloud networking, identity management, security, compliance, observability, incident response, disaster recovery, and platform reliability.
Enable engineering teams through reusable infrastructure patterns and technical documentation, and contribute to platform architecture and long-term infrastructure strategy.