{"schemaVersion":"jobsearcher.job.v1","id":"3c03e5ea00eef6829b2fdbe8","url":"https://jobsearcher.com/jobs/3c03e5ea00eef6829b2fdbe8","canonicalUrl":"https://jobsearcher.com/jobs/3c03e5ea00eef6829b2fdbe8","title":"Sr DevSecOps Engineer","description":"Job Description:\n\nAbout Science and Technology Corporation\n\nAbout Science and Technology Corporation (STC): STC is a U.S. government contractor providing scientific, engineering, and technical support to federal agencies, with deep roots in NOAA, NASA, and DoD programs. Founded in 1979 and headquartered in Hampton, VA, STC staff support a growing number of operational missions that monitor the Earth through Earth-observing systems and satellite platforms and through direct field research. STC also researches and investigates leading-edge observing technologies and assesses their applicability to operational missions. STC's NOAA Programs team supports a broad range of operational meteorological, environmental, and geospatial programs.\n\nAbout the AWIPS HIVE Program\n\nSTC is seeking candidates to support the National Weather Service (NWS) on the AWIPS Application Environment contract (commonly referred to as HIVE). AWIPS (Advanced Weather Interactive Processing System) is the mission-critical platform used by forecasters at National Weather Service sites nationwide to analyze environmental data and issue the forecasts, watches, and warnings that protect lives and property. Under the HIVE modernization initiative, STC provides engineering and technical talent in direct support of a major cloud transformation effort to move AWIPS from a legacy desktop system to a modern, cloud-native web application built on Amazon Web Services (AWS). The program operates in a collaborative Agile environment and involves migrating complex operational meteorological workflows, tools, and data visualization capabilities to a microservices-based architecture with a React/TypeScript frontend and Java/Spring Boot microservices backend.\n\nAbout This Role\n\nSTC is hiring a Senior DevSecOps Engineer to build and operate the cloud platform behind the HIVE safety-of-life weather-warning system for the National Weather Service. The platform runs on AWS with Kubernetes (EKS), a fully GitOps deployment model, and infrastructure defined entirely as code. This is a FISMA-Moderate environment actively maturing toward a multi-account federal landing zone, placing this role at the intersection of platform engineering, security, and compliance. You will be a senior hand on a small, high-trust team, moving real infrastructure through code and pipelines rather than tickets and click-ops.\n\nSpecific Duties Will Include\n\nOwn Terraform for a multi-environment, multi-account AWS estate: modules, state management, and safe reconciliation of live infrastructure into code\n\nOperate Amazon EKS clusters; networking, autoscaling, add-ons, workload identity (IRSA/Pod Identity), and cluster lifecycle\n\nRun and extend the GitOps delivery model using ArgoCD, where a merge is a deployment\n\nBuild and harden CI/CD pipelines in GitLab: security scanning, secrets detection, policy-as-code, container image scanning and signing, and the evidence trail behind them\n\nAdvance the program's security and compliance posture against NIST 800-53: least-privilege IAM, network isolation, continuous monitoring, and ATO artifacts\n\nSupport the migration to a federal multi-account landing zone: identity, cross-account networking, and environment promotion\n\nMentor mid- and junior engineers; raise the bar on change control, review discipline, and evidence-based engineering\n\nJob Requirements:\n\nBachelor's degree in Computer Science, Software Engineering, or related field\n\n5-7 years in infrastructure, platform, or DevOps with senior ownership of production systems\n\nDeep hands-on Terraform: reusable modules, remote state, drift reconciliation without breaking production\n\nStrong AWS depth: VPC and networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager\n\nKubernetes/EKS at production scale: workload identity (Pod Identity/IRSA), Helm, autoscaling, ingress and load balancing\n\nGitOps experience (ArgoCD or Flux) and CI/CD pipeline engineering (GitLab CI strongly preferred)\n\nDevSecOps in practice: SAST/container/IaC/secrets scanning, policy-as-code (OPA/conftest), and the discipline to make gates actually gate\n\nWorking knowledge of a federal compliance framework (FISMA/NIST 800-53/RMF) and ATO support requirements\n\n5+ years of experience with AWS cloud services and development\n\n5+ years of experience with containerization (Docker) and orchestration (ECS, EKS)\n\nPreferred Qualifications\n\nMulti-account AWS landing zone/Control Tower/Organizations design experience\n\nContainer supply-chain security: SBOMs, image signing (Notation/AWS Signer), admission control\n\nObservability with CloudWatch and/or Grafana\n\nFedRAMP or GovCloud exposure\n\nAWS Certifications (Developer Associate, Solutions Architect)\n\nWeather, geospatial, or scientific-data domain background\n\nKnowledge of infrastructure-as-code tools including CloudFormation/CDK/Terraform\n\nWork Arrangement\n\nFully remote.\n\nCitizenship Requirement\n\nUS Citizenship or Permanent Resident status required.","company":"Science Technology","rawCompany":"science technology","city":"Silver Spring","state":"MD","isRemote":false,"isActive":false,"createdAt":"2026-11-08T09:52:25.684Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1244.00","title":"Network and Computer Systems Administrators","slug":"network-and-computer-systems-administrators"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Sr DevSecOps Engineer","description":"Job Description:\n\nAbout Science and Technology Corporation\n\nAbout Science and Technology Corporation (STC): STC is a U.S. government contractor providing scientific, engineering, and technical support to federal agencies, with deep roots in NOAA, NASA, and DoD programs. Founded in 1979 and headquartered in Hampton, VA, STC staff support a growing number of operational missions that monitor the Earth through Earth-observing systems and satellite platforms and through direct field research. STC also researches and investigates leading-edge observing technologies and assesses their applicability to operational missions. STC's NOAA Programs team supports a broad range of operational meteorological, environmental, and geospatial programs.\n\nAbout the AWIPS HIVE Program\n\nSTC is seeking candidates to support the National Weather Service (NWS) on the AWIPS Application Environment contract (commonly referred to as HIVE). AWIPS (Advanced Weather Interactive Processing System) is the mission-critical platform used by forecasters at National Weather Service sites nationwide to analyze environmental data and issue the forecasts, watches, and warnings that protect lives and property. Under the HIVE modernization initiative, STC provides engineering and technical talent in direct support of a major cloud transformation effort to move AWIPS from a legacy desktop system to a modern, cloud-native web application built on Amazon Web Services (AWS). The program operates in a collaborative Agile environment and involves migrating complex operational meteorological workflows, tools, and data visualization capabilities to a microservices-based architecture with a React/TypeScript frontend and Java/Spring Boot microservices backend.\n\nAbout This Role\n\nSTC is hiring a Senior DevSecOps Engineer to build and operate the cloud platform behind the HIVE safety-of-life weather-warning system for the National Weather Service. The platform runs on AWS with Kubernetes (EKS), a fully GitOps deployment model, and infrastructure defined entirely as code. This is a FISMA-Moderate environment actively maturing toward a multi-account federal landing zone, placing this role at the intersection of platform engineering, security, and compliance. You will be a senior hand on a small, high-trust team, moving real infrastructure through code and pipelines rather than tickets and click-ops.\n\nSpecific Duties Will Include\n\nOwn Terraform for a multi-environment, multi-account AWS estate: modules, state management, and safe reconciliation of live infrastructure into code\n\nOperate Amazon EKS clusters; networking, autoscaling, add-ons, workload identity (IRSA/Pod Identity), and cluster lifecycle\n\nRun and extend the GitOps delivery model using ArgoCD, where a merge is a deployment\n\nBuild and harden CI/CD pipelines in GitLab: security scanning, secrets detection, policy-as-code, container image scanning and signing, and the evidence trail behind them\n\nAdvance the program's security and compliance posture against NIST 800-53: least-privilege IAM, network isolation, continuous monitoring, and ATO artifacts\n\nSupport the migration to a federal multi-account landing zone: identity, cross-account networking, and environment promotion\n\nMentor mid- and junior engineers; raise the bar on change control, review discipline, and evidence-based engineering\n\nJob Requirements:\n\nBachelor's degree in Computer Science, Software Engineering, or related field\n\n5-7 years in infrastructure, platform, or DevOps with senior ownership of production systems\n\nDeep hands-on Terraform: reusable modules, remote state, drift reconciliation without breaking production\n\nStrong AWS depth: VPC and networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager\n\nKubernetes/EKS at production scale: workload identity (Pod Identity/IRSA), Helm, autoscaling, ingress and load balancing\n\nGitOps experience (ArgoCD or Flux) and CI/CD pipeline engineering (GitLab CI strongly preferred)\n\nDevSecOps in practice: SAST/container/IaC/secrets scanning, policy-as-code (OPA/conftest), and the discipline to make gates actually gate\n\nWorking knowledge of a federal compliance framework (FISMA/NIST 800-53/RMF) and ATO support requirements\n\n5+ years of experience with AWS cloud services and development\n\n5+ years of experience with containerization (Docker) and orchestration (ECS, EKS)\n\nPreferred Qualifications\n\nMulti-account AWS landing zone/Control Tower/Organizations design experience\n\nContainer supply-chain security: SBOMs, image signing (Notation/AWS Signer), admission control\n\nObservability with CloudWatch and/or Grafana\n\nFedRAMP or GovCloud exposure\n\nAWS Certifications (Developer Associate, Solutions Architect)\n\nWeather, geospatial, or scientific-data domain background\n\nKnowledge of infrastructure-as-code tools including CloudFormation/CDK/Terraform\n\nWork Arrangement\n\nFully remote.\n\nCitizenship Requirement\n\nUS Citizenship or Permanent Resident status required.","datePosted":"2026-11-08T09:52:25.684Z","dateModified":"2026-11-08T09:52:25.684Z","hiringOrganization":{"@type":"Organization","name":"Science Technology","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Silver Spring","addressRegion":"MD","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"3c03e5ea00eef6829b2fdbe8"},"url":"https://jobsearcher.com/jobs/3c03e5ea00eef6829b2fdbe8"}}