Job description

Job Title: Enterprise DevSecOps Platform Engineer Location: St. Louis, MO (On-site) Employment Type: Contract (W2 through ZipStaff — No C2C or 1099) About the Opportunity: ZipStaff is seeking an experienced DevSecOps Platform Engineer to join the enterprise DevSecOps platform team at a major regulated utility organization in St. Louis, MO. This team owns the toolchain that supports the full software development lifecycle for 300+ developers . The role has a dual mandate: become productive quickly on the current self-hosted AWS EKS toolchain and carry real operational load, while also contributing to consolidation and migration to a SaaS-based toolchain. What You'll Do: Operate the Current Platform: • Administer CloudBees CI on EKS and GitHub Enterprise Server — lifecycle, upgrades, access governance, patching, and build troubleshooting. • Operate Artifactory, Xray, and SonarQube; support integrations. • Maintain and extend Terraform infrastructure through PR-based pipeline workflows. • Manage Kubernetes workloads on EKS — Helm releases, storage, scaling, troubleshooting. • Resolve production incidents across compute, storage, networking, identity, and certificates. • Drive vulnerability remediation and patch cadence; produce runbooks and documentation. Drive Consolidation and Migration: • Build and operate Actions Runner Controller (ARC) self-hosted runners on EKS, including hardening and private VPC connectivity. • Convert Jenkins shared-library pipelines to GitHub Actions reusable workflows. • Plan and execute phased repository migration waves, with validation and rollback. • Configure enterprise identity, SSO/SCIM, and access governance in the target platform. • Support developer onboarding and enablement; contribute to decommissioning plans. Required Qualifications: • Bachelor's degree required. • 7+ years in DevOps / DevSecOps / platform engineering. • Hands-on administration of an enterprise CI platform ( Jenkins / CloudBees preferred ) and pipeline development using shared/reusable libraries. • Practical GitHub Actions experience — workflows, reusable workflows, runners, secrets. • Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes. • Terraform at production scale — modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker. • Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates. • Non-negotiable systems fundamentals: • Linux administration and troubleshooting. • Networking (TCP/IP, DNS, routing, firewalls, load balancing, proxies, VPN/Transit Gateway, packet-level diagnostics). • Certificates and TLS (PKI, issuance/renewal, truststores, mTLS). • Identity (LDAP, Azure AD / SAML / OIDC, SSO, SCIM, RBAC). • Scripting in Python, Bash, and Groovy . • Ability to work independently with broad ownership, strong documentation discipline, and participation in an on-call rotation. • Ability to work on-site in St. Louis, MO . • Must be legally authorized to work in the United States without sponsorship now or in the future. Preferred Qualifications: • Prior GHES → GitHub Enterprise Cloud / EMU migration or Jenkins → GitHub Actions conversion at enterprise scale. • Production experience with GitHub Enterprise Importer (GEI) and Actions Runner Controller (ARC). • Artifactory/Xray, SonarQube, or Atlassian Cloud migration experience. • AWS certification (DevOps Engineer – Professional or Solutions Architect). • Experience in a regulated enterprise with formal change management. About ZipStaff: ZipStaff partners with leading organizations to connect skilled technology professionals with high-impact contract opportunities. We focus on quality matches and long-term success. To apply , please submit your resume highlighting your CloudBees/Jenkins, GitHub Actions, AWS EKS, Terraform, and enterprise platform-operations experience. Pay: $42 - $45 per hour

Requirements

Must-haves

Job Title: Enterprise DevSecOps Platform Engineer
Location: St. Louis, MO (On-site)
Employment Type: Contract (W2 through ZipStaff — No C2C or 1099)
Administer CloudBees CI on EKS and GitHub Enterprise Server — lifecycle, upgrades, access governance, patching, and build troubleshooting.
Operate Artifactory, Xray, and SonarQube; support integrations.
Maintain and extend Terraform infrastructure through PR-based pipeline workflows.
Manage Kubernetes workloads on EKS — Helm releases, storage, scaling, troubleshooting.
Resolve production incidents across compute, storage, networking, identity, and certificates.
Drive vulnerability remediation and patch cadence; produce runbooks and documentation.
Build and operate Actions Runner Controller (ARC) self-hosted runners on EKS, including hardening and private VPC connectivity.
Convert Jenkins shared-library pipelines to GitHub Actions reusable workflows.
Plan and execute phased repository migration waves, with validation and rollback.
Configure enterprise identity, SSO/SCIM, and access governance in the target platform.
Support developer onboarding and enablement; contribute to decommissioning plans.
Bachelor's degree required.
7+ years in DevOps / DevSecOps / platform engineering.
Practical GitHub Actions experience — workflows, reusable workflows, runners, secrets.
Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes.

Nice-to-haves

Hands-on administration of an enterprise CI platform ( Jenkins / CloudBees preferred ) and pipeline development using shared/reusable libraries.
Prior GHES → GitHub Enterprise Cloud / EMU migration or Jenkins → GitHub Actions conversion at enterprise scale.
Production experience with GitHub Enterprise Importer (GEI) and Actions Runner Controller (ARC).
Artifactory/Xray, SonarQube, or Atlassian Cloud migration experience.
AWS certification (DevOps Engineer – Professional or Solutions Architect).
Experience in a regulated enterprise with formal change management.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awskubernetesdockerazurepython

Platform: betterteam
Effort: medium