Senior DevOps Engineer

Overview

FTI is looking for a Senior DevOps Engineer  to join our growing team. FTI provides mission-tailored, technology-enabled services and solutions that enhance the ability of the Department of Defense, Intelligence Community, and the Federal Government to make the best decisions possible in support of national interests. Furthermore, FTI supports those who safeguard our nation with advanced technology, services and expertise while building upon our values to make a positive impact on our customers, each other, and our communities. Lastly, our culture is built around our 4Cs: Core Values (Ethics, Morals, Integrity, Honesty, Sincerity), Commitment, Compassion, and Charity.

Candidates must be in, or willing to relocate to Colorado Springs, CO and posses an active Top Secret clearance. 

Responsibilities

• Identify opportunities to improve process automation, automate existing and new processes, maintain and deploy cloud infrastructure, and support the Agile software development lifecycle, including development, testing, and deployment.
• Develop automation solutions using Ansible Automation Platform and Red Hat. Use Python and Ansible with networking technologies, including routing and switching, to manage heterogeneous environments and integrate with internal back-end infrastructure systems.
• Perform daily checks in the EC2 console to confirm all arch_level mvp EC2 instances are powered on. Respond to and resolve alerts from the operational and security SNS topics.
• Respond to security events and task orders created by the security team. Assist with incident response data gathering and response actions when security incidents occur.
• Monitor Citadel support tickets and address them where appropriate. Contribute to the backend-ansible-playbooks and backend-terraform code baselines based on tickets and the Citadel roadmap established by SZWO leadership. Commit code daily and apply infrastructure changes through Terraform or Ansible after the code has been committed.
• Submit configuration management requests for new features, technologies, additional servers, and network changes affecting the production zone. Coordinate changes affecting security posture, IATT, or ATO status with the security team before testing or introducing them into the AWS account, services, or servers.
• Check the DoD Security SRG webpage daily for changes affecting AWS security services. Perform daily checks of AWS security services, including Security Hub, Config, GuardDuty, and Inspector.
• Create accounts for new Citadel members on Tuesdays and Fridays as approved by the ISSO. Manage group memberships, password resets, and other account actions according to the Account Management policy defined by security.
• Administer GitLab, including weekly license-count checks, backups accounting for data exceeding the stated 400 GB supported limit, and runner deployments based on least privilege and an understanding of runner types. Manage repositories and collaborative version control.
• Use automation to reduce security compliance errors and vulnerabilities and improve GitLab security reporting. Analyze GitLab security scanning results and work with development teams to resolve identified issues.
• Perform root cause analysis for security-related issues in development environments. Investigate and resolve security, technical, and other CI/CD issues, and develop software updates and fixes.
• Assist in establishing and maintaining container standards and enforcing them. Apply industry best practices to incorporate security within a Software Factory.
• Deploy the Manticore security monitoring stack and make performance adjustments through Terraform. Deploy and manage Manticore ICD for cloud Manticore integration.
• Administer KASM and Appgate using privileged accounts, and administer Sonatype Nexus, Sonatype IQ, and Red Hat IDM. Coordinate changes affecting security posture with the security team.
• Check weekly for new releases of Citadel service components. Determine whether and when to apply upgrades and coordinate with the team and configuration management.
• Keep the security team informed of role-based access control (RBAC) and host-based access control (HBAC) changes and explain their security and access implications.

Education/Qualifications

• Bachelor’s degree from an accredited college or university in computer science or a similar field of study.
• Six or more years of DevOps engineering experience.
• Previous leadership experience through team leadership, technical leadership, mentorship, or management, with demonstrated ability to support team development and cross-functional collaboration.
• Strong hands-on experience developing and maintaining Ansible automation.
• Strong Red Hat Enterprise Linux administration, engineering, troubleshooting, or automation experience.
• Experience with Git-based repositories, branching, version control, and collaborative development workflows. GitLab experience is preferred.
• Practical experience supporting or deploying resources in AWS. AWS GovCloud experience is helpful but not required.
• At least intermediate knowledge of all Citadel services in AWS GovCloud, including how they operate and how to administer, troubleshoot, and support them.
• Proficient understanding of the DCO-S Security Classification Guide.
• Experience using Terraform for infrastructure as code. Candidates with limited Terraform experience may be considered if they demonstrate strong experience with Ansible, Red Hat Enterprise Linux, Git or GitLab, and AWS. Terraform training may be completed before onboarding.
• Experience developing tools and processes for automated builds, regression testing, monitoring, and releases across environments.
• Experience developing and deploying automation for monitoring and observability tools, such as Kibana, Elastic, or Splunk.
• Experience troubleshooting and resolving CI/CD pipeline failures or performance issues.
• Experience scripting with Bash and Python.
• Experience with DevOps pipeline tools and technologies, including Jenkins, Terraform, Helm, and Kubernetes.
• Security+ CE, SSCP, CCNA-Security, or GSEC certification meeting the position’s applicable DoD 8140 requirements.
• Must have an active TS/SCI security clearance.

For this role, the compensation range for candidates in Colorado is $130-$170K. Starting pay will be based on a number of factors and commensurate with qualifications & experience. FTI has a location-based compensation structure; there may be a different range for candidates in other locations.

#LI-KM1

#LI-Onsite