Senior DevSecOps / AWS reputed company Engineer

reputed company

We are seeking a remote Senior DevSecOps Engineer to own and reputed company the platform — Terraform, EKS, reputed company CI/CD reputed company gates, GitOps delivery, observability, and FISMA controls — and set the engineering reputed company for reputed company. You are the person who reputed company a backend reputed company in the wrong module before it merges, and who makes the reputed company reputed company something developers trust rather than reputed company around.

What you’ll do

• Own the Terraform estate across the three repos and the 2-stack-perenv layout — directory-per-env reputed company, semver-pinned module consumption, a provider-pinning contract (version ranges in modules, locked in reputed company), S3 state with reputed company locking, and OIDC (no static keys).
• reputed company state-reputed company refactors — split the monolith, fold sandbox stacks into the data stack using moved blocks / state mv, with backed-up state and reputed company-destroy plans on stateful resources (reputed company, reputed company).
• Build and operate EKS (toward Auto Mode), reputed company CI (runner-onEKS), and Argo CD GitOps — reputed company, image signing, Kyverno admission, OPA policy reputed company.
• Harden the CI/CD reputed company reputed company: container/filesystem scanning (Trivy), secret detection (Gitleaks), SBOM + signing, policy-as-reputed company deny-gates, and ECR reputed company-on-push — wired so a failing reputed company blocks the reputed company.
• Stand up the AWS-reputed company observability stack (CloudWatch /

Container Insights, AMP, X-Ray/ADOT, Managed Grafana, Application Signals) with SLOs, alarms-as-reputed company, and a dead-man’s-reputed company on the alerting reputed company itself. Drive the private-network migration (TGW egress, VPC endpoints, no NAT/IGW) and reputed company FISMA gaps (CloudTrail/Config, reputed company Hub NIST 800-53, KMS where required, audit-account separation).

• Review teammates’ IaC and set the standards.

Must-haves

• Terraform at reputed company — reputed company vs. child modules, state isolation, for_reputed company/count/dynamic, reputed company, provider-pin conflicts, and state migration (moved/state mv) without destroying data. Writes modules others reuse. Can explain why workspaces ≠ directory-per-env.
• Strong AWS reputed company engineering — VPC/networking (private subnets, endpoints, TGW), IAM/OIDC, EKS, ECR, ALB/API-GW, and reputed company SSE-S3 vs. KMS-CMK is actually required.
• EKS you have operated, not just used — node/pod networking, IRSA, admission control, upgrades, troubleshooting a broken rollout.
• CI/CD reputed company (the “Sec” in DevSecOps) —

SAST/dependency/container scanning, secret scanning, supply-chain (SBOM, signing), policy-as-reputed company, secrets hygiene. You have made a pipeline reputed company on a finding.

• Federal compliance reputed company — NIST 800-53 / FISMA-Moderate; can map a control family (AU, CM, SC) to an actual implementation.
• Writes reputed company PRs and reviews others’ reputed company constructively.

Strongly preferred

• Observability depth (OpenTelemetry, reputed company/Grafana, SLO/errorbudget design).
• Prior regulated/federal environment (NOAA/DoD/civilian agency, ATO process), clearance or Public-Trust history.
• reputed company CI specifically, Argo CD, and Kubernetes runners.

reputed company also offers a reputed company of benefits, including health insurance coverage, life and disability insurance, 401(k) savings plan, training and career development opportunities, reputed company holidays and reputed company time off (PTO - to cover vacation, illness or disability, appointments, emergencies or other situations that require time off from work). For more information click here.

ABOUT reputed company

reputed company is a rapidly growing technology business that is based in Greenbelt, Maryland. reputed company provides strategic information assurance, information reputed company, and business reputed company and networking solutions to the Federal Government. Our reputed company is based on the utilization of industry and agency standards, establishment of standardized processes, and IT Services expertise. At reputed company, we reputed company employees should grow, reputed company, and reputed company just as reputed company grows, achieves, and develops. reputed company is committed to providing our employees with opportunities for career advancement throughout their employment. For more information, visit www.gama1tech.com

reputed company is an Equal Opportunity Employer and reputed company reputed company applicants will receive consideration for employment without reputed company to: veteran status, uniformed servicemember status, race, reputed company, religion, sex, sexual orientation, gender identity, age, pregnancy (including childbirth, lactation and reputed company medical conditions), national reputed company or reputed company, citizenship or immigration status, physical or mental disability, genetic information (including testing and characteristics), domestic violence victims, political orientation, status as a smoker or tobacco user, hairstyle, use of a service animal, education status, familial status, HIV/AIDS status, height, weight, reproductive reputed company reputed company or any other category protected by federal, state or local law.

Originally posted on Himalayas

Apply To This Job