Configuration Manager

Must be a US Citizen with an active TS or eligible for TS. No Third Party.

Strategic Innovation Group (SIG) is seeking a Configuration Manager to own the platform-engineering and configuration-control backbone of a new analytics platform being built inside a federal client's on-premises FedRAMP Moderate environment. This role combines classic configuration management - baselines, change control, artifact integrity, document control - with hands-on Dev Sec Ops : the CI/CD pipeline, container builds and security scanning, Kubernetes deployment, dependency approvals, and log integration.

The successful candidate is the person who makes sure code moves from a developer's branch into the client environment repeatably, securely, and with a record, and who works directly with client CIO staff and the security lead to keep the pipeline aligned to the System Security Plan.

SIG is a fast growing 8(a) government contractor based in Arlington, Virginia. We offer a broad range of technical expertise and experience in Digital Transformation, Data Management/Data Science, and Systems Modernization. At SIG, our people are our mission. Come join our team! A successful candidate will be offered the following:

• Great work/life balance
• Eligibility for performance-based participation in cash bonuses
• Potential to participate in growth of the company through incentives
• Excellent benefits, including health, dental, vision, generous PTO, a 401(k) with match, life insurance, short- and long-term disability, and a health savings account (HSA)

• Establish and operate the CI/CD pipeline (Jenkins or Azure Dev Ops) integrated with Git Lab for code delivery, covering build, automated test, security scanning, artifact creation, and deployment to designated environments.
• Manage container image builds, image and dependency vulnerability scanning, SBOM generation, and the process for requesting client approval of new dependencies and licenses.
• Deploy and maintain application workloads on the client's Rancher-managed Kubernetes platform; manage environment configuration, secrets handling, and promotion between development, test, and production name spaces.
• Define and maintain the configuration management plan: baselines for code, infrastructure-as-code, data models, and documents; change control and release procedures; version and tagging conventions.
• Integrate application and platform logging with the client's Splunk instance and support audit-logging requirements from the security lead.
• Coordinate the technical establishment of interconnections and environment access with client CIO staff; track and resolve blockers to environment readiness.
• Maintain deliverable and document configuration control, including the source-code and documentation package delivered to the client repository at acceptance.
• Support the System Security Plan with configuration-management (CM family) control implementation evidence.
• Deliver pipeline and platform runbooks and knowledge transfer to the client-designated support team during transition.

• Bachelor's degree in Computer Science, Information Technology, or a related field; equivalent experience may be considered.
• 3+ years in configuration management, release engineering, Dev Ops, or platform engineering roles, including 1+ years operating CI/CD and container platforms in a federal or FedRAMP environment (3+ years with a Master's degree).
• Hands-on experience administering CI/CD pipelines in Jenkins and/or Azure Dev Ops, integrated with Git Lab or a comparable Git platform.
• Hands-on experience deploying and operating containerized applications on Kubernetes (Rancher, Open Shift, or comparable enterprise distribution).
• Experience integrating security scanning (SAST, container image, dependency/SCA) into pipelines and managing findings with development teams.
• Experience establishing configuration baselines, change control, and release management under a documented CM plan.
• Working knowledge of NIST SP 800-53 configuration-management controls and experience supporting an ATO or FedRAMP authorization package.
• Scripting proficiency (Bash, Python, or Power Shell) and infrastructure-as-code experience (Helm, Terraform, Ansible, or equivalent).

• Experience working inside an on-premises federal environment with restricted internet access and Government-approved software lists.
• Experience managing database schema migrations, connection secrets, and backup/restore procedures…