DevSecOps​/Platform Engineer Mid-Level - tangramflex

Tangram Flex is seeking a Dev Sec Ops  / Platform Engineer with 3+ years of experience to provide direct support to our software development teams by leveraging Dev Sec Ops  best practices in a team-based environment. In this role, you will use Cloud-Native technologies to build, manage, and optimize CI/CD pipelines and application build environments that support both internal and external customers.

Candidates should possess a solid technical skillset to work closely with software engineers to refine delivery workflows, integrate automated security controls across classified and unclassified networks, and help accelerate Continuous Authority to Operate (cATO) processes.

Our team and products provide solutions to enable innovators to design, develop, verify, and advance critical systems, while accelerating innovation that advances our nation's security. By accelerating delivery of critical systems, Tangram is transforming the way our nation solves complex software challenges.

• Work alongside software engineers to continuously improve the software delivery workflow.
• Create, manage, and optimize CI/CD pipelines using Git Lab CI or alternative deployment platforms.
• Implement and maintain Git Ops workflows using FluxCD or ArgoCD to manage cluster state.
• Triage and repair code automation pipelines promptly when build or deployment failures occur.
• Identify and implement opportunities for pipeline caching and performance improvements to shorten build cycles.

• Deliver engineering and IT services using Cloud-Native technologies, AWS Gov Cloud, and Kubernetes.
• Apply Infrastructure-as-Code (IaC) paradigms (e.g., Terraform) to manage cloud infrastructure and air-gapped environments.
• Containerize applications with common tools, such as Docker, and deploy using Kubernetes and Helm.
• Support deployments across multiple security enclaves (NIPRNet, SIPRNet, JWICS, C2S/SC2S).

• Integrate container and dependency scanning tools into CI/CD pipelines to catch vulnerabilities early.
• Enforce DoD Cyber Security directives, STIGs, and NIST SP 800-53 controls to support cATO initiatives.
• Leverage DoD Enterprise Dev Sec Ops  models (such as Platform One or Big Bang) and hardened container repositories (Iron Bank).

• Configure observability and monitoring tools (such as Prometheus and Grafana) to proactively identify system issues and performance degradation.
• Evaluate and recommend new tools to continuously adopt and improve Infrastructure Team workflows.
• Create and execute backup, restore, and disaster-recovery plans for core services and platforms.