DevSecOps Platform Engineer

Location: Hybrid - St. Louis, MO (3 days onsite, preferably Wednesday-Friday)

US Citizen or Green Card Candidates Only

Type: Contract-to-hire (conversion is the goal)

Our client, a large St. Louis-area enterprise, is adding a Senior Dev Sec Ops  Platform Engineer to the team that owns its enterprise Dev Sec Ops  toolchain, supporting the full software development lifecycle for 300+ developers. This is a dual-mandate role. You will get productive quickly on the existing self-hosted toolchain on AWS EKS and carry real operational load, then help drive the consolidation and migration to a SaaS-based toolchain (Git Hub Enterprise Cloud, Git Hub Actions, and Atlassian Cloud) planned to begin later this year.

• AWS cloud
• Terraform
• Python scripting

Current Environment: Git Hub Enterprise Server, Cloud Bees CI (Jenkins) on EKS, JFrog Artifactory & Xray, Sonar Qube, Jira/Confluence Data Center on EKS; AWS (EKS, EC2, ECS, VPC, IAM, S3, Route 53, KMS, EFS, RDS);
Terraform;
Helm;
Docker;
Prometheus/Grafana;
Azure AD/SSO

Target Environment: Git Hub Enterprise Cloud (EMU) with Azure AD federation and SCIM;
Git Hub Actions replacing Cloud Bees CI;
Actions Runner Controller (ARC) self-hosted runners on EKS; repository migration at scale via Git Hub Enterprise Importer; consolidated code security scanning;
Atlassian Cloud

• Provide ongoing production and operational support to internal teams; resolve incidents, tickets, and operational requests
• Administer Cloud Bees CI on EKS and Git Hub Enterprise Server – lifecycle, upgrades, access governance, patching, and build troubleshooting
• Operate Artifactory, Xray, and Sonar Qube and support their integrations
• Maintain and extend Terraform infrastructure code through PR-based pipeline workflows
• Manage Kubernetes workloads on EKS – Helm releases, storage, scaling, and troubleshooting
• Resolve production issues across compute, storage, networking, identity, and certificate layers
• Drive vulnerability remediation and patch cadence; write runbooks and documentation
• Onboard new teams to platform standards and help them adopt CI/CD pipelines, Git Hub, and related tooling
• Partner with Application Security and Cybersecurity to keep security policies, standards, and compliance requirements in place

• Build and operate ARC self-hosted runners on EKS, including hardening and private VPC connectivity
• Convert Jenkins shared-library pipelines to Git Hub Actions reusable workflows
• Plan and execute phased repository migration waves with validation and rollback
• Configure enterprise identity, SSO/SCIM, and access governance in the target platform
• Support developer onboarding and enablement; contribute to decommissioning plans

• 7+ years in Dev Ops, Dev Sec Ops , or platform engineering
• Hands-on administration of an enterprise CI platform (Jenkins/Cloud Bees preferred) and pipeline development using shared/reusable libraries
• Practical Git Hub Actions experience - workflows, reusable workflows, runners, secrets
• Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes
• Terraform at production scale - modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker
• Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates
• Core systems fundamentals:
  Linux administration; networking (TCP/IP, DNS, routing, firewalls, load balancing, proxies, VPN/Transit Gateway, packet-level diagnostics); certificates and TLS (PKI, issuance/renewal, truststores, mTLS); identity (LDAP, Azure AD, SAML/OIDC, SSO, SCIM, RBAC)
• Scripting in Python, Bash, and Groovy
• Works independently with broad ownership, documents well, and participates in an on-call rotation

• GHES ->
  Git Hub Enterprise Cloud/EMU migration or Jenkins ->
  Git Hub Actions conversion at enterprise scale
• Git Hub Enterprise Importer (GEI) and Actions Runner Controller (ARC) production experience
• Artifactory/Xray, Sonar Qube, or Atlassian Cloud migration experience
• AWS certification (Dev Ops Engineer – Professional or Solutions Architect)
• Experience in a regulated enterprise with formal change management