Senior DevOps Lead​/Architect

ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, Dev Sec Ops , digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications
.

The Senior Dev Ops Lead/Architect is the key technical role accountable for the architecture, technical direction, and operational readiness of the CI/CD and Dev Ops platform used by software development teams, including CI/CD pipelines, artifact and vulnerability scanning, test management integration, code quality, observability, and performance testing, running on AWS and Kubernetes. The role sets technical standards, owns the platform roadmap, leads the technical side of any transition of the Dev Ops platform from a prior provider, maintains platform-level Dev Sec Ops  controls and security authorization support, and serves as the senior technical escalation point.

It is a hands-on technical leadership role that works closely with the CI/CD Team Lead/Technical Delivery Manager, tools administrators, and the Program Manager, and performs its work in accordance with established customer Dev Ops standards in support of the broader team's delivery, quality, and security objectives.

• Own the end-to-end architecture of the Dev Ops platform (CI/CD, AWS EKS, artifact and vulnerability scanning, test management, observability, and performance testing), including reference architectures, architecture decision records, and system diagrams.
• Develop and maintain a multi-year technical roadmap and recommend modernization, consolidation, and capacity changes for customer decision, including total-cost-of-ownership and migration impact.
• Research, evaluate, and prototype alternative tools and practices, including AI-enabled tooling under customer AI governance, and present options with a clear recommendation.
• Present and defend architectural recommendations to customer stakeholders, development teams, and other contractors.

• Lead the technical aspects of transitioning operation of the Dev Ops platform from a prior provider, including knowledge capture, configuration baselining, parallel-run validation, and readiness criteria agreed with the CI/CD Team Lead/Technical Delivery Manager and the customer.
• Ensure continuity of operations through capacity planning, backup and disaster recovery planning, and cost controls aligned with customer Fin Ops guidelines.

• Set technical standards for CI/CD pipeline design (pipeline-as-code, shared libraries, security gates, and progressive delivery) on Jenkins/Cloud Bees CI and Kubernetes.
• Define repository, retention, access, and vulnerability policy for the artifact repository and scanning platforms (e.g., JFrog Artifactory/Xray), and quality gate standards for code quality tooling (e.g., Sonar Qube).
• Direct the design of test management integration, observability (e.g., Grafana/Prometheus), and performance testing (e.g., Apache JMeter-based platforms).
• Review and approve significant platform changes, including upgrades, gate-rule changes, and migrations; lead complex troubleshooting and root cause analysis.

• Maintain platform-level Dev Sec Ops  controls, including secrets management, Infrastructure as Code security, software supply chain controls (e.g., SBOM generation and dependency scanning), and Zero Trust principles.
• Support security authorization (e.g., Authorization to Operate) maintenance for managed platforms with the customer's security officer, including continuous monitoring, Plan of Action and Milestones (POA&M) tracking, and vulnerability remediation.
• Maintain a documented security-responsibility boundary between platform-level Dev Sec Ops  and any independent security testing performed by a separate testing party, and coordinate remediation of findings.

• Serve as the senior technical escalation point for platform incidents; lead incident response and root cause analysis, and ensure runbooks and escalation paths are current and tested.
• Define service level indicators and objectives…