{"schemaVersion":"jobsearcher.job.v1","id":"4f2d192384d151a2061941cb","url":"https://jobsearcher.com/jobs/4f2d192384d151a2061941cb","canonicalUrl":"https://jobsearcher.com/jobs/4f2d192384d151a2061941cb","title":"Platform/DevSecOps SME","description":"Job Description:\n\nAbout Science and Technology Corporation\n\nAbout Science and Technology Corporation (STC): STC is a U.S. government contractor providing scientific, engineering, and technical support to federal agencies, with deep roots in NOAA, NASA, and DoD programs. Founded in 1979 and headquartered in Hampton, VA, STC staff support a growing number of operational missions that monitor the Earth through Earth-observing systems and satellite platforms and through direct field research. STC also researches and investigates leading-edge observing technologies and assesses their applicability to operational missions. STC's NOAA Programs team supports a broad range of operational meteorological, environmental, and geospatial programs.\n\nAbout the AWIPS HIVE Program\n\nSTC is seeking candidates to support the National Weather Service (NWS) on the AWIPS Application Environment contract (commonly referred to as HIVE). AWIPS (Advanced Weather Interactive Processing System) is the mission-critical platform used by forecasters at National Weather Service sites nationwide to analyze environmental data and issue the forecasts, watches, and warnings that protect lives and property. Under the HIVE modernization initiative, STC provides engineering and technical talent in direct support of a major cloud transformation effort to move AWIPS from a legacy desktop system to a modern, cloud-native web application built on Amazon Web Services (AWS). The program operates in a collaborative Agile environment and involves migrating complex operational meteorological workflows, tools, and data visualization capabilities to a microservices-based architecture with a React/TypeScript frontend and Java/Spring Boot microservices backend.\n\nAbout This Role\n\nSTC is seeking a senior Platform/DevSecOps Subject Matter Expert (SME) to provide expert-level leadership and hands-on engineering for the HIVE program's cloud delivery and security posture. This is a deeply technical, hands-on role requiring mastery of GitLab CI/CD pipelines, Kubernetes deployment, GitOps, and infrastructure-as-code for a custom application stack comprising micro-frontends, APIs, and microservices. Security is built into the pipeline, not bolted on; you will embed scanning, policy enforcement, and compliance evidence into the delivery flow and carry it through to FISMA High/FedRAMP ATO.\n\nSpecific Duties Will Include\n\nLead platform engineering for GitLab CI/CD pipelines (build/test/scan/deploy, self-hosted runners) and EKS Auto Mode deployments\n\nOperate multi-region AWS EKS infrastructure using Helm, GitLab Kubernetes Agent, and GitOps via ArgoCD\n\nManage infrastructure-as-code with Terraform/AWS CDK and oversee container supply chain (ECR, signing, scanning)\n\nImplement and govern DevSecOps pipeline security: SAST/DAST/SCA/container/secrets scanning as enforced CI stages\n\nEnforce policy-as-code using AWS Config, SCPs, and OPA; drive vulnerability management to closure\n\nManage secrets and key management (Secrets Manager, KMS) and produce compliance evidence from real CI output\n\nBuild and maintain observability (CloudWatch, X-Ray, Container Insights, CloudTrail, Grafana) and threat detection (Security Hub, GuardDuty, Config, SIEM)\n\nLead FISMA High/FedRAMP Moderate compliance activities, ATO support, and pen-test coordination\n\nImplement Zero Trust architecture, least-privilege IAM, and workload identity (IRSA)\n\nMentor platform and DevSecOps engineers on the program team\n\nJob Requirements:\n\nBachelor's degree in Computer Science, Information Security, or related field\n\n12+ years of overall experience in platform engineering, DevOps, and/or DevSecOps\n\n7+ years hands-on platform/DevOps/DevSecOps ownership\n\n4+ years hands-on CI/CD with strong GitLab CI/CD proficiency\n\n3+ years Kubernetes in production (AWS EKS) and Docker\n\nHands-on IaC (Terraform/CDK), scripting (Bash/Python), and GitOps (ArgoCD)\n\nDeep experience with SAST/DAST/SCA/container and secrets scanning as enforced pipeline gates\n\n3+ years AWS security (IAM, GuardDuty, Security Hub, KMS, WAF, Config)\n\nFederal compliance expertise: FISMA, FedRAMP, NIST 800-53, Zero Trust\n\nPreferred Qualifications\n\nAWS Solutions Architect or Security Specialty certification\n\nCKA/CKS (Certified Kubernetes Administrator/Security Specialist)\n\nMulti-region high-availability operations experience\n\nPolicy-as-code expertise (OPA/Gatekeeper)\n\nFISMA High or FedRAMP Moderate ATO support experience\n\nPen-test coordination and control testing experience\n\nWork Arrangement\n\nFully remote.\n\nCitizenship Requirement\n\nUS Citizenship or Permanent Resident status required.","company":"Science Technology","rawCompany":"science technology","city":"Silver Spring","state":"MD","isRemote":false,"isActive":false,"createdAt":"2026-11-11T09:14:49.558Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1244.00","title":"Network and Computer Systems Administrators","slug":"network-and-computer-systems-administrators"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Platform/DevSecOps SME","description":"Job Description:\n\nAbout Science and Technology Corporation\n\nAbout Science and Technology Corporation (STC): STC is a U.S. government contractor providing scientific, engineering, and technical support to federal agencies, with deep roots in NOAA, NASA, and DoD programs. Founded in 1979 and headquartered in Hampton, VA, STC staff support a growing number of operational missions that monitor the Earth through Earth-observing systems and satellite platforms and through direct field research. STC also researches and investigates leading-edge observing technologies and assesses their applicability to operational missions. STC's NOAA Programs team supports a broad range of operational meteorological, environmental, and geospatial programs.\n\nAbout the AWIPS HIVE Program\n\nSTC is seeking candidates to support the National Weather Service (NWS) on the AWIPS Application Environment contract (commonly referred to as HIVE). AWIPS (Advanced Weather Interactive Processing System) is the mission-critical platform used by forecasters at National Weather Service sites nationwide to analyze environmental data and issue the forecasts, watches, and warnings that protect lives and property. Under the HIVE modernization initiative, STC provides engineering and technical talent in direct support of a major cloud transformation effort to move AWIPS from a legacy desktop system to a modern, cloud-native web application built on Amazon Web Services (AWS). The program operates in a collaborative Agile environment and involves migrating complex operational meteorological workflows, tools, and data visualization capabilities to a microservices-based architecture with a React/TypeScript frontend and Java/Spring Boot microservices backend.\n\nAbout This Role\n\nSTC is seeking a senior Platform/DevSecOps Subject Matter Expert (SME) to provide expert-level leadership and hands-on engineering for the HIVE program's cloud delivery and security posture. This is a deeply technical, hands-on role requiring mastery of GitLab CI/CD pipelines, Kubernetes deployment, GitOps, and infrastructure-as-code for a custom application stack comprising micro-frontends, APIs, and microservices. Security is built into the pipeline, not bolted on; you will embed scanning, policy enforcement, and compliance evidence into the delivery flow and carry it through to FISMA High/FedRAMP ATO.\n\nSpecific Duties Will Include\n\nLead platform engineering for GitLab CI/CD pipelines (build/test/scan/deploy, self-hosted runners) and EKS Auto Mode deployments\n\nOperate multi-region AWS EKS infrastructure using Helm, GitLab Kubernetes Agent, and GitOps via ArgoCD\n\nManage infrastructure-as-code with Terraform/AWS CDK and oversee container supply chain (ECR, signing, scanning)\n\nImplement and govern DevSecOps pipeline security: SAST/DAST/SCA/container/secrets scanning as enforced CI stages\n\nEnforce policy-as-code using AWS Config, SCPs, and OPA; drive vulnerability management to closure\n\nManage secrets and key management (Secrets Manager, KMS) and produce compliance evidence from real CI output\n\nBuild and maintain observability (CloudWatch, X-Ray, Container Insights, CloudTrail, Grafana) and threat detection (Security Hub, GuardDuty, Config, SIEM)\n\nLead FISMA High/FedRAMP Moderate compliance activities, ATO support, and pen-test coordination\n\nImplement Zero Trust architecture, least-privilege IAM, and workload identity (IRSA)\n\nMentor platform and DevSecOps engineers on the program team\n\nJob Requirements:\n\nBachelor's degree in Computer Science, Information Security, or related field\n\n12+ years of overall experience in platform engineering, DevOps, and/or DevSecOps\n\n7+ years hands-on platform/DevOps/DevSecOps ownership\n\n4+ years hands-on CI/CD with strong GitLab CI/CD proficiency\n\n3+ years Kubernetes in production (AWS EKS) and Docker\n\nHands-on IaC (Terraform/CDK), scripting (Bash/Python), and GitOps (ArgoCD)\n\nDeep experience with SAST/DAST/SCA/container and secrets scanning as enforced pipeline gates\n\n3+ years AWS security (IAM, GuardDuty, Security Hub, KMS, WAF, Config)\n\nFederal compliance expertise: FISMA, FedRAMP, NIST 800-53, Zero Trust\n\nPreferred Qualifications\n\nAWS Solutions Architect or Security Specialty certification\n\nCKA/CKS (Certified Kubernetes Administrator/Security Specialist)\n\nMulti-region high-availability operations experience\n\nPolicy-as-code expertise (OPA/Gatekeeper)\n\nFISMA High or FedRAMP Moderate ATO support experience\n\nPen-test coordination and control testing experience\n\nWork Arrangement\n\nFully remote.\n\nCitizenship Requirement\n\nUS Citizenship or Permanent Resident status required.","datePosted":"2026-11-11T09:14:49.558Z","dateModified":"2026-11-11T09:14:49.558Z","hiringOrganization":{"@type":"Organization","name":"Science Technology","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Silver Spring","addressRegion":"MD","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"4f2d192384d151a2061941cb"},"url":"https://jobsearcher.com/jobs/4f2d192384d151a2061941cb"}}