Software Engineer - CI/CD (TS/SCI Clearance Required)
Designs, builds, and operates CI/CD pipelines for containerized workloads in Kubernetes environments, focusing on automation, security, and scalability. Core tech: Kubernetes, Helm, IaC, GitOps, DevSecOps, observability tools, and distributed systems debugging.
- Compensation
- Not disclosed
- Location
- Herndon, Virginia, United States;King of Prussia, Pennsylvania, United States
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Software engineering
- Posted
Skills
Must have
- TS/SCI Clearance
- BS in Software Engineering or related field
- 2-10 years of experience in CI/CD and Kubernetes-focused engineering or SRE/Platform Engineering
- Strong Kubernetes skills: core objects, scheduling, RBAC, networking, storage, upgrades, troubleshooting
- Hands-on experience building CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions, Azure DevOps, or similar)
- Experience with Helm and at least one IaC tool (Terraform preferred)
- Experience operating container platforms (Docker/OCI), registries, and image lifecycle management
- Proficiency with Linux and scripting (Bash and/or Python); comfort debugging distributed systems
- Experience implementing security controls in pipelines (scanning, secrets handling, least privilege, policy)
- Familiarity with observability tooling (Prometheus/Grafana, ELK/OpenSearch, Loki, Splunk, Datadog, etc.)
Nice to have
- Experience with NGA CORE (DevSecOps environment with integrated CI/CD pipeline and Kubernetes-based PaaS)
- Experience supporting Kubernetes deployment and container orchestration across multiple security domains/networks in government/IC environments
- Hands-on GitOps operations (Argo CD/Flux), including multi-tenant cluster patterns
- Experience with policy-as-code (OPA/Gatekeeper, Kyverno) and admission control guardrails
- Experience with service mesh (Istio/Linkerd) and zero-trust-friendly network segmentation
- Experience building reusable platform ‘golden paths’ (pipeline templates, Helm charts, scaffolding)
- Strong background in platform hardening - supply chain security, artifact signing, provenance, SBOM workflows
- Familiarity with compliance and ATO workflows in regulated environments (RMF/NIST controls)
- Agile development with familiarity in Scaled Agile Framework (SAFe) using VersionOne
- Experience with Angular, Dojo, Oracle WebLogic, Tomcat, Oracle DBMS, Postgres DBMS, SQL, PL/SQL, UNIX/Linux, HTML, Selenium, JavaScript, EJB, Web Services, Microservices, REST, XML, UML
- Deployment architectures and CI/CD pipelines using Docker, Git/JIRA, Kubernetes, Jenkins, Conductor, Kafka/Zookeeper, Consul, CMDB
- Big data technologies: JSON, Kafka, Microservices, Elasticsearch, Hive, Spark, R, Pig, Oozie workflows, Hadoop ecosystem, Knowi, MongoDB, Oracle, MySQL RDS, Elastic, Logstash, Kibana, Zookeeper, Consu
Full description
Responsibilities:
Design, build, and operate CI/CD pipelines for containerized workloads across dev/test/prod, and implement core Kubernetes platform capabilities (RBAC, networking, ingress, secrets, autoscaling, and upgrades). Package and deploy services with Helm/Kustomize using repeatable release strategies, automate environments with IaC, and embed DevSecOps controls and GitOps standards. Improve operability with strong observability and incident practices, partner with application teams to onboard and troubleshoot, harden the software supply chain and artifact flow, and document platform patterns and templates to scale adoption.
Required Qualifications:
- TS/SCI Clearance
- BS in Software Engineering or related field
- 2-10 years of experience in CI/CD and Kubernetes-focused engineering or SRE/Platform Engineering
- Strong Kubernetes skills: core objects, scheduling, RBAC, networking, storage, upgrades, troubleshooting
- Hands-on experience building CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions, Azure DevOps, or similar)
- Experience with Helm and at least one IaC tool (Terraform preferred)
- Experience operating container platforms (Docker/OCI), registries, and image lifecycle management
- Proficiency with Linux and scripting (Bash and/or Python); comfort debugging distributed systems
- Experience implementing security controls in pipelines (scanning, secrets handling, least privilege, policy)
- Familiarity with observability tooling (Prometheus/Grafana, ELK/OpenSearch, Loki, Splunk, Datadog, etc.)
Preferred Qualifications:
- Experience with NGA CORE (Common Operations Release Environment) - a DevSecOps environment with an integrated CI/CD pipeline and a Kubernetes-based PaaS.
- Experience supporting Kubernetes deployment and container orchestration across multiple security domains / networks in government or IC environments
- Hands-on GitOps operations (Argo CD/Flux), including multi-tenant cluster patterns
- Experience with policy-as-code (OPA/Gatekeeper, Kyverno) and admission control guardrails
- Experience with service mesh (Istio/Linkerd) and zero-trust-friendly network segmentation
- Experience building reusable platform “golden paths” (pipeline templates, Helm charts, scaffolding)
- Strong background in platform hardening - supply chain security, artifact signing, provenance, SBOM workflows
- Familiarity with compliance and ATO workflows in regulated environments (RMF/NIST controls)