DevOps Engineer – Secure Infrastructure & CI/CD

Role Overview

3GIMBALS is seeking a DevOps Engineer to build and maintain the infrastructure, automation, and deployment pipelines that keep our unclassified PAI/CAI-based analytic platform reliable, secure, and continuously deliverable. This role is responsible for infrastructure-as-code, CI/CD, containerization and orchestration, observability, and security automation across development and production environments, including operation within secure and restricted networks. The ideal candidate treats infrastructure as software and security as a first-class, automated concern.

Key Responsibilities

Infrastructure & Automation

• Design, provision, and manage cloud and on-premises infrastructure using infrastructure-as-code
• Build and maintain container orchestration platforms (Kubernetes, Docker)
• Automate provisioning, configuration, scaling, and environment management
• Manage infrastructure across development, test, and production environments, including restricted or air-gapped networks

CI/CD & Release Engineering

• Design and maintain CI/CD pipelines for application, data, and model deployments
• Implement automated build, test, security-scan, and deployment workflows
• Support reproducible builds and artifact/registry management
• Enable rapid, reliable, and rollback-capable releases

Observability & Reliability

• Implement monitoring, logging, alerting, and tracing
• Establish service-level objectives and support incident response and reliability engineering
• Optimize the performance, availability, and cost of platform infrastructure

Security & Compliance (DevSecOps)

• Integrate security scanning, secrets management, and vulnerability management into pipelines
• Implement system hardening, patching, and compliance automation
• Support Authority to Operate (ATO), continuous monitoring, and RMF/NIST controls
• Implement zero-trust, encryption, and secure network segmentation practices

Required Qualifications

Technical Expertise

• 4+ years of DevOps, SRE, or platform engineering experience
• Strong experience with containerization and orchestration (Docker, Kubernetes)
• Proficiency with infrastructure-as-code (Terraform, Ansible, or CloudFormation)
• Hands-on experience building CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins, or similar)
• Experience with cloud platforms (AWS, Azure, or GCP)
• Scripting skills in Python, Bash, or Go

Operations & Security

• Experience with monitoring/observability stacks (Prometheus, Grafana, ELK)
• Understanding of DevSecOps practices, secrets management, and vulnerability scanning
• Familiarity with Linux system administration and networking fundamentals
• Experience with secure software supply chain and artifact management

Domain Knowledge

• Experience operating production systems with high-availability and security requirements

Preferred Qualifications

• Active security clearance or ability to obtain one
• Experience in government, defense, or intelligence contracting environments
• Experience deploying in secure/classified, restricted, or air-gapped environments
• Knowledge of federal compliance frameworks (FedRAMP, FISMA, NIST 800-53, RMF) and ATO processes
• Experience with AWS GovCloud or Azure Government
• Familiarity with MLOps and data-pipeline deployment
• Relevant certifications (CKA/CKAD, AWS/Azure, Security+)

Technical Environment

• Infrastructure-as-Code: Terraform, Ansible
• Containers: Docker, Kubernetes
• CI/CD: GitLab CI, GitHub Actions, or Jenkins
• Observability: Prometheus, Grafana, ELK
• Cloud: AWS GovCloud, Azure Government
• Security: DevSecOps tooling, secrets management, zero-trust, RMF / NIST controls

This role keeps the platform running and shipping: secure, automated infrastructure and pipelines that let every other team deliver capability quickly and safely in mission-critical environments.