Site Reliability​/Release Pipeline Engineer Security Clearance

Position: Site Reliability/ Release Pipeline Engineer with Security Clearance
SRE + Release Pipeline Engineer Clearance:
Top Secret clearance

Location:

Remote Role Framing
Owns the path from local development to deployed AWS cluster across DCSA's Gov Cloud (IL2/IL5) and classified (IL6/Secret) partitions, and the health of those clusters. These environments are currently in IATT and working towards scale and ATO. Deliberately a single role: at current team size, build/release and run/operate are the same person's problem.
Release side: CDK stacks, Flux Git Ops, Helm chart authoring, Envoy Gateway routes, EKS/IRSA, container builds, Git Lab CI pipeline automation, and the local-to-AWS promotion path. Run side: the observability/tracing stack, cross-service tracing, runtime health, credential rotation, incident response, and the preflight/diagnose/QA loops.
This role directly supports OY2 Workstream 1 (Image Builder Pipeline — STIG-compliant AMI automation, Artifactory integration, Git Lab CI deployment), Workstream 6 (Import Account Standardization — Baseline Account Pipeline, tagging compliance, centralized VPC endpoints), and the GenAI IDP deployment pipeline (deploying the IDP Solution to Customer non-production and production environments via IaC). Basic Qualifications
3+ years of professional experience in SRE, Dev Ops, platform, or infrastructure engineering
Experience operating Kubernetes (EKS) in production, including in DoD/IC classified environments
Experience packaging and deploying applications with Helm (authoring and maintaining charts, not only consuming them)

Experience with Flux (or an equivalent Git Ops controller — e.g., Argo CD) driving continuous delivery of Helm releases

Experience with AWS compute and managed services (e.g., EKS, RDS, S3, IAM/IRSA, EC2 Image Builder)

Experience with infrastructure-as-code;
Type Script/CDK experience specifically, or demonstrated ability to work in a Type Script IaC codebase

Experience with production observability and distributed tracing (e.g., Open Telemetry, Grafana/Tempo, or equivalent), used to diagnose failures from telemetry rather than guesswork
Experience leading incident diagnosis and resolution, including identifying and confirming root cause before remediating

Experience with Git Lab CI/CD pipelines for build automation and deployment
Proficiency in at least one scripting language (e.g., Python) for tooling and automation

Preferred Qualifications
Experience building STIG-compliant AMI pipelines using EC2 Image Builder with DoD security baseline validation

Experience with Artifactory integration for AMI/container image distribution across AWS Organizations

Experience with cross-domain solutions (AWS Diode, CDS) and SIPRNet/JWICS environments

Experience with AWS Organizations, SCPs, OU design, and multi-account governance

Experience with certificate lifecycle management (ACM, Private CA) and automated renewal workflows
Experience deploying or operating ML/LLM-serving infrastructure (e.g., Amazon Bedrock endpoints, Sage Maker, model-inference endpoints) and reasoning about token/latency/cost from traces

Experience with an ECR- or registry-based Git Ops model (charts/images mirrored to a registry, controller reconciling from it)
Experience diagnosing failed or stuck Helm/Flux reconciliations (Helm Release not converging, drift between desired and live state)

Experience with Envoy/gateway and certificate/TLS management in classified environments
Proficiency using AI coding assistants as a daily driver, with the judgment to validate their output before it reaches a cluster
Bachelor's degree in Computer Science or a related field, or equivalent practical experience Program Qualification
Run an engineering practice driven by evaluation, testing, and verification — changes are proven with tests, traces, and metrics before they are called done
Operate agentic systems fluently (MCP tools, Bedrock/LLM calls, streaming, distributed traces) in support of GenAI IDP document classification and field extraction workflows
Work within DCSA classified environments (IL5/IL6) following DoD security baselines and STIG compliance requirements
Support the GenAI IDP solution: prompt engineering, model fine-tuning, evaluation logic for document section…