Sr DevSecOps Engineer

Job Description

About Science and Technology Corporation

About Science and Technology Corporation (STC): STC is a U.S. government contractor providing scientific, engineering, and technical support to federal agencies, with deep roots in NOAA, NASA, and DoD programs. Founded in 1979 and headquartered in Hampton, VA, STC staff support a growing number of operational missions that monitor the Earth through Earth-observing systems and satellite platforms and through direct field research. STC also researches and investigates leading-edge observing technologies and assesses their applicability to operational missions. STC's NOAA Programs team supports a broad range of operational meteorological, environmental, and geospatial programs.

About the AWIPS HIVE Program

STC is seeking candidates to support the National Weather Service (NWS) on the AWIPS Application Environment contract (commonly referred to as HIVE). AWIPS (Advanced Weather Interactive Processing System) is the mission-critical platform used by forecasters at National Weather Service sites nationwide to analyze environmental data and issue the forecasts, watches, and warnings that protect lives and property. Under the HIVE modernization initiative, STC provides engineering and technical talent in direct support of a major cloud transformation effort to move AWIPS from a legacy desktop system to a modern, cloud-native web application built on Amazon Web Services (AWS). The program operates in a collaborative Agile environment and involves migrating complex operational meteorological workflows, tools, and data visualization capabilities to a microservices-based architecture with a React/TypeScript frontend and Java/Spring Boot microservices backend.

About This Role

STC is hiring a Senior DevSecOps Engineer to build and operate the cloud platform behind the HIVE safety-of-life weather-warning system for the National Weather Service. The platform runs on AWS with Kubernetes (EKS), a fully GitOps deployment model, and infrastructure defined entirely as code. This is a FISMA-Moderate environment actively maturing toward a multi-account federal landing zone, placing this role at the intersection of platform engineering, security, and compliance. You will be a senior hand on a small, high-trust team, moving real infrastructure through code and pipelines rather than tickets and click-ops.

Specific Duties Will Include

• Own Terraform for a multi-environment, multi-account AWS estate: modules, state management, and safe reconciliation of live infrastructure into code

• Operate Amazon EKS clusters; networking, autoscaling, add-ons, workload identity (IRSA/Pod Identity), and cluster lifecycle

• Run and extend the GitOps delivery model using ArgoCD, where a merge is a deployment

• Build and harden CI/CD pipelines in GitLab: security scanning, secrets detection, policy-as-code, container image scanning and signing, and the evidence trail behind them

• Advance the program's security and compliance posture against NIST 800-53: least-privilege IAM, network isolation, continuous monitoring, and ATO artifacts

• Support the migration to a federal multi-account landing zone: identity, cross-account networking, and environment promotion

• Mentor mid- and junior engineers; raise the bar on change control, review discipline, and evidence-based engineering

Job Requirements

• Bachelor's degree in Computer Science, Software Engineering, or related field

• 5-7 years in infrastructure, platform, or DevOps with senior ownership of production systems

• Deep hands-on Terraform: reusable modules, remote state, drift reconciliation without breaking production

• Strong AWS depth: VPC and networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager

• Kubernetes/EKS at production scale: workload identity (Pod Identity/IRSA), Helm, autoscaling, ingress and load balancing

• GitOps experience (ArgoCD or Flux) and CI/CD pipeline engineering (GitLab CI strongly preferred)

• DevSecOps in practice: SAST/container/IaC/secrets scanning, policy-as-code (OPA/conftest), and the discipline to make gates actually gate

• Working knowledge of a federal compliance framework (FISMA/NIST 800-53/RMF) and ATO support requirements

• 5+ years of experience with AWS cloud services and development

• 5+ years of experience with containerization (Docker) and orchestration (ECS, EKS)

Preferred Qualifications

• Multi-account AWS landing zone/Control Tower/Organizations design experience

• Container supply-chain security: SBOMs, image signing (Notation/AWS Signer), admission control

• Observability with CloudWatch and/or Grafana

• FedRAMP or GovCloud exposure

• AWS Certifications (Developer Associate, Solutions Architect)

• Weather, geospatial, or scientific-data domain background

• Knowledge of infrastructure-as-code tools including CloudFormation/CDK/Terraform

Work Arrangement

Fully remote.

Citizenship Requirement

US Citizenship or Permanent Resident status required.