DevSecOps Platform Engineer

Senior DevSecOps Platform EngineerLocation: Hybrid – St. Louis, MO (3 days onsite, preferably Wednesday–Friday)US Citizen or Green Card Candidates OnlyType: Contract-to-hire (conversion is the goal)About the RoleOur client, a large St. Louis-area enterprise, is adding a Senior DevSecOps Platform Engineer to the team that owns its enterprise DevSecOps toolchain, supporting the full software development lifecycle for 300+ developers. This is a dual-mandate role. You will get productive quickly on the existing self-hosted toolchain on AWS EKS and carry real operational load, then help drive the consolidation and migration to a SaaS-based toolchain (GitHub Enterprise Cloud, GitHub Actions, and Atlassian Cloud) planned to begin later this year.Must-HavesAWS cloudTerraformPython scriptingCurrent Environment: GitHub Enterprise Server, CloudBees CI (Jenkins) on EKS, JFrog Artifactory & Xray, SonarQube, Jira/Confluence Data Center on EKS; AWS (EKS, EC2, ECS, VPC, IAM, S3, Route 53, KMS, EFS, RDS); Terraform; Helm; Docker; Prometheus/Grafana; Azure AD/SSOTarget Environment: GitHub Enterprise Cloud (EMU) with Azure AD federation and SCIM; GitHub Actions replacing CloudBees CI; Actions Runner Controller (ARC) self-hosted runners on EKS; repository migration at scale via GitHub Enterprise Importer; consolidated code security scanning; Atlassian CloudWhat You’ll DoOperate and support the current platformProvide ongoing production and operational support to internal teams; resolve incidents, tickets, and operational requestsAdminister CloudBees CI on EKS and GitHub Enterprise Server – lifecycle, upgrades, access governance, patching, and build troubleshootingOperate Artifactory, Xray, and SonarQube and support their integrationsMaintain and extend Terraform infrastructure code through PR-based pipeline workflowsManage Kubernetes workloads on EKS – Helm releases, storage, scaling, and troubleshootingResolve production issues across compute, storage, networking, identity, and certificate layersDrive vulnerability remediation and patch cadence; write runbooks and documentationOnboard new teams to platform standards and help them adopt CI/CD pipelines, GitHub, and related toolingPartner with Application Security and Cybersecurity to keep security policies, standards, and compliance requirements in placeDrive consolidation and migrationBuild and operate ARC self-hosted runners on EKS, including hardening and private VPC connectivityConvert Jenkins shared-library pipelines to GitHub Actions reusable workflowsPlan and execute phased repository migration waves with validation and rollbackConfigure enterprise identity, SSO/SCIM, and access governance in the target platformSupport developer onboarding and enablement; contribute to decommissioning plansRequired QualificationsBachelor’s degree7+ years in DevOps, DevSecOps, or platform engineeringHands-on administration of an enterprise CI platform (Jenkins/CloudBees preferred) and pipeline development using shared/reusable librariesPractical GitHub Actions experience – workflows, reusable workflows, runners, secretsStrong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production KubernetesTerraform at production scale – modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and DockerPipeline security tooling: SAST, SCA, SBOM, container scanning, quality gatesCore systems fundamentals: Linux administration; networking (TCP/IP, DNS, routing, firewalls, load balancing, proxies, VPN/Transit Gateway, packet-level diagnostics); certificates and TLS (PKI, issuance/renewal, truststores, mTLS); identity (LDAP, Azure AD, SAML/OIDC, SSO, SCIM, RBAC)Scripting in Python, Bash, and GroovyWorks independently with broad ownership, documents well, and participates in an on-call rotationPreferred QualificationsGHES → GitHub Enterprise Cloud/EMU migration or Jenkins → GitHub Actions conversion at enterprise scaleGitHub Enterprise Importer (GEI) and Actions Runner Controller (ARC) production experienceArtifactory/Xray, SonarQube, or Atlassian Cloud migration experienceAWS certification (DevOps Engineer – Professional or Solutions Architect)Code quality tool experienceExperience in a regulated enterprise with formal change management