Senior DevSecOps / Platform Engineer - Clearance Required at LMI

Job description

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed. Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors—helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value. The Opportunity We’re looking for a Senior DevSecOps / Platform Engineer with significant experience in AWS to help us build and support the core infrastructure that powers our Navy logistics and asset visibility platform. You’ll help design, deploy, and maintain a Platform-as-a-Service (PaaS) environment that runs containerized apps across hybrid and multi-cloud environments. You'll work closely with developers, DevSecOps engineers, and Navy users to ensure stability, security, and speed. Remote (U.S. Based) | Some Travel Required What You'll Do • CI/CD & Pipeline Engineering: Architect, build, and maintain robust GitLab Pipelines for seamless application deployment. • Migration Support: Play a key role in assisting the Platform team with the migration of legacy repositories and workflows from BitBucket to GitLab . • Infrastructure Provisioning: Design, deploy, and manage the infrastructure behind our apps—across AWS GovCloud , edge, and Navy networks using Terraform, Ansible, and GitLab . • Containerization & Orchestration: Drive containerization efforts for mission-critical applications (NADACS, SPECTR, etc.) and manage Kubernetes • Resilience & Recovery: Develop and maintain Helm Charts for deployments and ensure cluster resilience through automated Kubernetes backups and recovery testing (e.g., Velero ). • Security & Compliance Automation: Engineer automated processes for RHEL image hardening and execute automated STIG checklists . • ATO Integration: Integrate continuous, automated security scanning directly into pipelines to maintain Authority to Operate (ATO) status and support ICAM integration. • Platform Operations: Establish comprehensive continuous monitoring, alerting, and reporting mechanisms (e.g., Prometheus/Grafana ) across the platform. • Secrets Management: Oversee cryptographic lifecycles through rigorous secrets management and automated key rotations. What We’re Looking For • Clearance & Certification: Active Secret clearance or higher (required) and meet DoD 8570/8140 baseline certifications (e.g., CompTIA Security+ CE). • Experience Level: 5+ years of experience (Mid-to-senior level) functioning as a DevSecOps or Platform Engineer, specifically within DoD , federal, or highly regulated environments. • Cloud Expertise: Significant experience deploying and managing cloud infrastructure using AWS GovCloud and hybrid cloud environments. • Orchestration: Hands-on Kubernetes administration and custom Helm chart development (CKAD or CKA preferred). • Operating Systems: Strong background in RHEL system administration and scripting automated system/container hardening. • Tools: Advanced proficiency building pipelines natively in GitLab , with experience handling migrations from BitBucket . • Core Competencies: An automation-centric approach to eliminate manual toil and a security-first mindset that treats security as a foundational element. • Technical Breadth: Knowledge of secure identity and access management ( ICAM ) protocols (SAML, OAuth2, OIDC) and proficiency in at least one language (e.g., Python ). Bonus Points For: • Master’s degree in Computer Science or a related field. • Prior experience with U.S. Navy programs or command and control platforms. • Experience securing or operating IL5+ environments . • AWS Certification (Solutions Architect or Developer Associate). Target salary range: $125,000 - 175,000 Disclaimer: The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances. #LI-SH1 Applicants must meet eligibility requirements for a U.S. Government security clearance. Only US Citizens are eligible for a security clearance. For this position, LMI will only consider applicants with security clearances or applicants who are eligible for security clearances, due to the nature of the work. US-Remote We can recommend jobs specifically for you! Click here to get started.

Requirements

Must-haves

Remote (U.S. Based) | Some Travel Required
CI/CD & Pipeline Engineering: Architect, build, and maintain robust GitLab Pipelines for seamless application deployment.
Migration Support: Play a key role in assisting the Platform team with the migration of legacy repositories and workflows from BitBucket to GitLab .
Infrastructure Provisioning: Design, deploy, and manage the infrastructure behind our apps—across AWS GovCloud , edge, and Navy networks using Terraform, Ansible, and GitLab .
Containerization & Orchestration: Drive containerization efforts for mission-critical applications (NADACS, SPECTR, etc.) and manage Kubernetes
Resilience & Recovery: Develop and maintain Helm Charts for deployments and ensure cluster resilience through automated Kubernetes backups and recovery testing (e.g., Velero ).
Security & Compliance Automation: Engineer automated processes for RHEL image hardening and execute automated STIG checklists .
ATO Integration: Integrate continuous, automated security scanning directly into pipelines to maintain Authority to Operate (ATO) status and support ICAM integration.
Platform Operations: Establish comprehensive continuous monitoring, alerting, and reporting mechanisms (e.g., Prometheus/Grafana ) across the platform.
Secrets Management: Oversee cryptographic lifecycles through rigorous secrets management and automated key rotations.
What We’re Looking For
Clearance & Certification: Active Secret clearance or higher (required) and meet DoD 8570/8140 baseline certifications (e.g., CompTIA Security+ CE).
Experience Level: 5+ years of experience (Mid-to-senior level) functioning as a DevSecOps or Platform Engineer, specifically within DoD , federal, or highly regulated environments.
Cloud Expertise: Significant experience deploying and managing cloud infrastructure using AWS GovCloud and hybrid cloud environments.
Operating Systems: Strong background in RHEL system administration and scripting automated system/container hardening.
Tools: Advanced proficiency building pipelines natively in GitLab , with experience handling migrations from BitBucket .
Core Competencies: An automation-centric approach to eliminate manual toil and a security-first mindset that treats security as a foundational element.
Technical Breadth: Knowledge of secure identity and access management ( ICAM ) protocols (SAML, OAuth2, OIDC) and proficiency in at least one language (e.g., Python ).
Master’s degree in Computer Science or a related field.
Prior experience with U.S. Navy programs or command and control platforms.
Experience securing or operating IL5+ environments .
AWS Certification (Solutions Architect or Developer Associate).
We can recommend jobs specifically for you!

Nice-to-haves

Orchestration: Hands-on Kubernetes administration and custom Helm chart development (CKAD or CKA preferred).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsci/cdkubernetespython

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Vision

Pto