Senior Platform Engineer; DevSecOps - San Antonio

About Bravo 17

Bravo
17 LLC was founded to help federal agencies deliver order of magnitude improvement in digital products and services with a focus on Customer and User Experience. Core services include digital strategy, digital product management, system design development & optimization for applications and IT. See us at

We are seeking a visionary Senior Platform Engineer (Dev Sec Ops ) to architect, secure, and scale cloud infrastructure. With a minimum of 4 years in the field, you aren't just managing servers; you are building the automated "paved road" that allows developers to ship code securely and rapidly.

In this role, you will bridge the gap between development, security, and operations. You will be responsible for moving security "left" in our CI/CD pipelines, ensuring that cloud-native applications are resilient by design. As a Lead, you will influence the long-term technical roadmap.

This position is targeted for San Antonio, Texas, and is on site.

• Cloud Architecture & IaC: Architect, implement, and maintain highly available, fault-tolerant, and multi-cloud infrastructure (AWS, Azure, GCP, OCI) using Infrastructure as Code (IaC) tools like Terraform, Cloud Formation, or Ansible.
• Dev Sec Ops  & Security Leadership: Lead the Dev Sec Ops  strategy, moving security "left" by integrating automated security scanning (SAST, DAST), container security, and compliance checks directly into CI/CD pipelines.
• CI/CD Orchestration: Lead the evolution of deployment pipelines (e.g., Jenkins, Git Lab CI, Git Hub Actions) to enable secure, rapid, and zero-downtime application deployments.
• Cloud Governance: Establish and manage comprehensive cloud governance, including Identity and Access Management (IAM), encryption (at rest/in transit), and cloud-native security toolsets.
• Site Reliability Engineering (SRE): Implement robust observability (monitoring, logging, alerting) with tools like Prometheus, Grafana, and Cloud Watch. Drive continuous improvement by leading incident response and post-mortem processes.
• Capacity Planning & Reliability: Collaborate with development teams to embed reliability into application design, and lead capacity planning to forecast resource needs and ensure effective system scaling.
• Technical Leadership & Documentation: Provide technical leadership and mentorship to Dev Ops engineers, conducting code reviews and promoting a culture of continuous learning. Author detailed technical documentation for all development and operational processes.

• Experience & Education
• Minimum 4+ years of experience in Dev Ops, Site Reliability Engineering (SRE), or Cloud Engineering, with at least 2 years focused specifically on security.
• BS or equivalent in Computer Science, Engineering, Mathematics, Information Systems, or a related technical degree.
• Certifications:
  
  CompTIA Security+ or equivalent (IAT-2).
• Technical Expertise
• Deep mastery of AWS; experience managing multi-cloud or hybrid-cloud environments is required.
• Expert-level knowledge of Kubernetes (K8s) orchestration, including securing container images and runtime environments.
• Advanced scripting skills in Python, Go, or Bash.
• Deep understanding of CI/CD tools (e.g., Jenkins, Git Lab CI, Git Hub Actions, Azure Dev Ops, Argo CD).
• Security & Compliance
• Solid understanding of security frameworks and compliance standards (e.g., SOC2, ISO 27001, NIST, or CIS benchmarks).
• Professional & Clearance Requirements
• Proven ability to explain complex security risks to non-technical stakeholders and advocate for best practices.

You are a builder. You are comfortable operating without excessive structure and know how to create clarity where it doesn’t exist.

You thrive in environments where standards are high, teams are small, and impact is visible. You do not need hand-holding, but you are collaborative and generous with your expertise.

You are motivated by mission-driven work and understand the responsibility that comes with designing for federal and defense environments. You can balance user-centered design with regulatory constraints, policy requirements, and security realities.

You:

• Take ownership…