Senior Cloud Systems Administrator / DevSecOps Security Engineer

Role overview

Platform operations and reliability

• Administer DDMP cloud environments and operate the managed Kubernetes platform supporting containerized services.
• Maintain cloud infrastructure, networking, storage, databases, integrations, endpoints, certificates, and DNS to approved architecture and security baselines.
• Support migration from VDI-hosted Linux/Windows servers to an elastic, multi-AZ cloud-native platform.
• Maintain backup, recovery, high-availability, disaster-recovery, and restore-validation procedures.
• Monitor service health, performance, capacity, backups, deployments, and cloud utilization; develop dashboards and service-level metrics.

Delivery and security operations

• Administer CI/CD pipelines and implement repeatable, auditable releases and rollbacks across environments.
• Embed automated source, dependency, secrets, container-image, infrastructure-as-code, and vulnerability scans in CI/CD.
• Maintain secure artifact repositories, container registries, configuration baselines, deployment manifests, and release evidence.
• Operate IAM, Kubernetes RBAC, least-privilege access, service identities, secrets, encryption, key management, and privileged-access controls.
• Coordinate vulnerability scans and remediation; sustain security monitoring, audit logging, threat detection, and alerting.
• Apply and document DISA STIG/SRG configurations for systems, containers, Kubernetes, databases, applications, and infrastructure.
• Maintain RMF/ATO evidence, POA&Ms, risk registers, remediation plans, and compliance status reports.

Qualifications

• Bachelor's degree and 11+ years of progressively responsible experience in systems administration, cloud operations, DevSecOps, cybersecurity, SRE, or a comparable discipline.
• At least 3 years operating cloud-hosted, containerized, or hybrid enterprise applications in production.
• Top Secret clearance with SCI eligibility.
• Strong Linux administration; working knowledge of Windows Server.
• Hands-on Docker and Kubernetes experience, including cluster operations, security, troubleshooting, upgrades, patching, backup, recovery, scaling, and availability.
• Direct experience supporting DoD IL5, DISA-hosted, NIPRNET-connected, or DoW ATO environments.
• Experience with CAC/PKI, ICAM federation, certificate lifecycle management, and zero-trust access patterns.
• Experience with security assessment, ATO, continuous monitoring, RMF artifacts, and eMASS or equivalent DoW governance systems.
• Experience with security scanning, Kubernetes security, observability, PostgreSQL, API security, or Microsoft 365/SharePoint integrations; familiarity with managed AI/LLM security considerations.

Compensation and benefits

• Salary range is USD $135,000 to $195,000 per year; actual compensation depends on factors permitted by law.
• Benefits include healthcare, paid leave, retirement plans, insurance, and education and training assistance.

About the employer