DevOps Engineer – Secure Infrastructure & CI/CD at 3GIMBALS in Quantico, VA, USA

Job description

• 3GIMBALS is seeking a DevOps Engineer to build and maintain the infrastructure, automation, and deployment pipelines that keep our unclassified PAI/CAI-based analytic platform reliable, secure, and continuously deliverable. This role is responsible for infrastructure-as-code, CI/CD, containerization and orchestration, observability, and security automation across development and production environments, including operation within secure and restricted networks. The ideal candidate treats infrastructure as software and security as a first-class, automated concern.
• This role keeps the platform running and shipping: secure, automated infrastructure and pipelines that let every other team deliver capability quickly and safely in mission-critical environments.

Responsibilities

• Infrastructure & Automation
• Design, provision, and manage cloud and on-premises infrastructure using infrastructure-as-code
• Build and maintain container orchestration platforms (Kubernetes, Docker)
• Automate provisioning, configuration, scaling, and environment management
• Manage infrastructure across development, test, and production environments, including restricted or air-gapped networks
• CI/CD & Release Engineering
• Design and maintain CI/CD pipelines for application, data, and model deployments
• Implement automated build, test, security-scan, and deployment workflows
• Support reproducible builds and artifact/registry management
• Enable rapid, reliable, and rollback-capable releases
• Observability & Reliability
• Implement monitoring, logging, alerting, and tracing
• Establish service-level objectives and support incident response and reliability engineering
• Optimize the performance, availability, and cost of platform infrastructure
• Security & Compliance (DevSecOps)
• Integrate security scanning, secrets management, and vulnerability management into pipelines
• Implement system hardening, patching, and compliance automation
• Support Authority to Operate (ATO), continuous monitoring, and RMF/NIST controls
• Implement zero-trust, encryption, and secure network segmentation practices

Requirements

• Technical Expertise
• 4+ years of DevOps, SRE, or platform engineering experience
• Strong experience with containerization and orchestration (Docker, Kubernetes)
• Proficiency with infrastructure-as-code (Terraform, Ansible, or CloudFormation)
• Hands-on experience building CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins, or similar)
• Experience with cloud platforms (AWS, Azure, or GCP)
• Scripting skills in Python, Bash, or Go
• Operations & Security
• Experience with monitoring/observability stacks (Prometheus, Grafana, ELK)
• Understanding of DevSecOps practices, secrets management, and vulnerability scanning
• Familiarity with Linux system administration and networking fundamentals
• Experience with secure software supply chain and artifact management
• Domain Knowledge
• Experience operating production systems with high-availability and security requirements
• Active security clearance or ability to obtain one
• Experience in government, defense, or intelligence contracting environments
• Experience deploying in secure/classified, restricted, or air-gapped environments
• Knowledge of federal compliance frameworks (FedRAMP, FISMA, NIST 800-53, RMF) and ATO processes
• Experience with AWS GovCloud or Azure Government
• Familiarity with MLOps and data-pipeline deployment
• Relevant certifications (CKA/CKAD, AWS/Azure, Security+)

Skills

Required

• Docker
• Kubernetes
• Terraform
• Ansible
• CloudFormation
• GitLab CI
• GitHub Actions
• Jenkins
• AWS
• Azure
• GCP
• Python

Preferred

• Active security clearance
• FedRAMP
• FISMA
• NIST 800-53
• RMF
• ATO processes
• AWS GovCloud
• Azure Government