Job Title
Sr DevSecOps Engineer
Location
VA US (Primary)
Category
Engineering
Job Type
Full-Time
Compensation Minimum (USD)
$120,000
Compensation Maximum (USD)
$136,000
Education
Bachelor's Degree
Minimum Citizenship Status Required
U.S Citizen or Permanent Resident
Security Clearance Required
None
Job Description
About Science and Technology Corporation
About Science and Technology Corporation (STC): STC is a U.S. government contractor providing scientific, engineering, and technical support to federal agencies, with deep roots in NOAA, NASA, and DoD programs. Founded in 1979 and headquartered in Hampton, VA, STC staff support a growing number of operational missions that monitor the Earth through Earth-observing systems and satellite platforms and through direct field research. STC also researches and investigates leading-edge observing technologies and assesses their applicability to operational missions. STC's NOAA Programs team supports a broad range of operational meteorological, environmental, and geospatial programs.
About the AWIPS HIVE Program
STC is seeking candidates to support the National Weather Service (NWS) on the AWIPS Application Environment contract (commonly referred to as HIVE). AWIPS (Advanced Weather Interactive Processing System) is the mission-critical platform used by forecasters at National Weather Service sites nationwide to analyze environmental data and issue the forecasts, watches, and warnings that protect lives and property. Under the HIVE modernization initiative, STC provides engineering and technical talent in direct support of a major cloud transformation effort to move AWIPS from a legacy desktop system to a modern, cloud-native web application built on Amazon Web Services (AWS). The program operates in a collaborative Agile environment and involves migrating complex operational meteorological workflows, tools, and data visualization capabilities to a microservices-based architecture with a React/TypeScript frontend and Java/Spring Boot microservices backend.
About This Role
STC is hiring a Senior DevSecOps Engineer to build and operate the cloud platform behind the HIVE safety-of-life weather-warning system for the National Weather Service. The platform runs on AWS with Kubernetes (EKS), a fully GitOps deployment model, and infrastructure defined entirely as code. This is a FISMA-Moderate environment actively maturing toward a multi-account federal landing zone, placing this role at the intersection of platform engineering, security, and compliance. You will be a senior hand on a small, high-trust team, moving real infrastructure through code and pipelines rather than tickets and click-ops.
Specific Duties Will Include
- Own Terraform for a multi-environment, multi-account AWS estate: modules, state management, and safe reconciliation of live infrastructure into code
- Operate Amazon EKS clusters; networking, autoscaling, add-ons, workload identity (IRSA/Pod Identity), and cluster lifecycle
- Run and extend the GitOps delivery model using ArgoCD, where a merge is a deployment
- Build and harden CI/CD pipelines in GitLab: security scanning, secrets detection, policy-as-code, container image scanning and signing, and the evidence trail behind them
- Advance the program's security and compliance posture against NIST 800-53: least-privilege IAM, network isolation, continuous monitoring, and ATO artifacts
- Support the migration to a federal multi-account landing zone: identity, cross-account networking, and environment promotion
- Mentor mid- and junior engineers; raise the bar on change control, review discipline, and evidence-based engineering
Job Requirements
- Bachelor's degree in Computer Science, Software Engineering, or related field
- 5-7 years in infrastructure, platform, or DevOps with senior ownership of production systems
- Deep hands-on Terraform: reusable modules, remote state, drift reconciliation without breaking production
- Strong AWS depth: VPC and networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager
- Kubernetes/EKS at production scale: workload identity (Pod Identity/IRSA), Helm, autoscaling, ingress and load balancing
- GitOps experience (ArgoCD or Flux) and CI/CD pipeline engineering (GitLab CI strongly preferred)
- DevSecOps in practice: SAST/container/IaC/secrets scanning, policy-as-code (OPA/conftest), and the discipline to make gates actually gate
- Working knowledge of a federal compliance framework (FISMA/NIST 800-53/RMF) and ATO support requirements
- 5+ years of experience with AWS cloud services and development
- 5+ years of experience with containerization (Docker) and orchestration (ECS, EKS)
Preferred Qualifications
- Multi-account AWS landing zone/Control Tower/Organizations design experience
- Container supply-chain security: SBOMs, image signing (Notation/AWS Signer), admission control
- Observability with CloudWatch and/or Grafana
- FedRAMP or GovCloud exposure
- AWS Certifications (Developer Associate, Solutions Architect)
- Weather, geospatial, or scientific-data domain background
- Knowledge of infrastructure-as-code tools including CloudFormation/CDK/Terraform
Work Arrangement
Fully remote.
Citizenship Requirement
ship or Permanent Resident status required.
We are equal opportunity/affirmative action employers, committed to diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status, or any other protected characteristic under state or local law.
