Software Engineer - CI/CD (TS/SCI Clearance Required)

Design, build, and operate CI/CD pipelines for containerized workloads across dev/test/prod, and implement core Kubernetes platform capabilities (RBAC, networking, ingress, secrets, autoscaling, and upgrades). Package and deploy services with Helm/Kustomize using repeatable release strategies, automate environments with IaC, and embed DevSecOps controls and GitOps standards.

Improve operability with strong observability and incident practices, partner with application teams to onboard and troubleshoot, harden the software supply chain and artifact flow, and document platform patterns and templates to scale adoption.

- 2-10 years of experience in CI/CD and Kubernetes-focused engineering or SRE/Platform Engineering

- Strong Kubernetes skills: core objects, scheduling, RBAC, networking, storage, upgrades, troubleshooting

- Hands-on experience building CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions, Azure DevOps, or similar)

- Experience with Helm and at least one IaC tool (Terraform preferred)

- Experience operating container platforms (Docker/OCI), registries, and image lifecycle management

- Proficiency with Linux and scripting (Bash and/or Python); comfort debugging distributed systems

- Experience implementing security controls in pipelines (scanning, secrets handling, least privilege, policy)

- Familiarity with observability tooling (Prometheus/Grafana, ELK/OpenSearch, Loki, Splunk, Datadog, etc.)

- Experience with NGA CORE (Common Operations Release Environment) - a DevSecOps environment with an integrated CI/CD pipeline and a Kubernetes-based PaaS.

- Experience supporting Kubernetes deployment and container orchestration across multiple security domains / networks in government or IC environments

- Hands-on GitOps operations (Argo CD/Flux), including multi-tenant cluster patterns

- Experience with policy-as-code (OPA/Gatekeeper, Kyverno) and admission control guardrails

- Experience with service mesh (Istio/Linkerd) and zero-trust-friendly network segmentation

- Experience building reusable platform "golden paths" (pipeline templates, Helm charts, scaffolding)

- Strong background in platform hardening - supply chain security, artifact signing, provenance, SBOM workflows

- Familiarity with compliance and ATO workflows in regulated environments (RMF/NIST controls)

- Agile development with familiarity in Scaled Agile Framework (SAFe) using VersionOne

- Web/automation technologies: HTML, Selenium, JavaScript, EJB, Web Services, Microservices (Docker & Kubernetes), REST, XML, UML

- Deployment architectures and CI/CD pipelines using Docker, Git/JIRA, Kubernetes, Jenkins, Conductor, Kafka/Zookeeper, Consul, CMDB

- Hadoop ecosystem: Hive data, Oozie, Spark, Pig, Impala, Hue

- COTS integration: Knowi, MongoDB, Oracle, MySQL RDS, Elastic, Logstash, Kibana, Zookeeper, Consul, Hadoop/HDFS