Interested candidates are encouraged to apply as soon as possible.
Koniag Operations Services, LLC (KOS), a Koniag Government Services company, is seeking an experienced
Harness/Traceable Integration Engineer (Senior) to support enterprise DevSecOps operations, API security, and IT administrative and operational support services for a federal government client. This position requires an active security clearance or the ability to obtain and maintain a government background investigation and all requisite IT access authorizations prior to performing work. Specific clearance requirements will be confirmed at the time of offer. Primary work will be performed at the client site in Washington, DC, and approved remote/telework locations.
Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits, and tuition reimbursement.
This role serves as a critical senior technical function responsible for the architecture, engineering, implementation, administration, and continuous improvement of the enterprise Harness software delivery platform and Traceable AI API security capabilities across a complex, geographically distributed federal IT environment spanning on-premises infrastructure, cloud platforms, and hybrid environments.
The ideal candidate is a highly experienced and technically authoritative DevSecOps and API security engineer with deep, hands-on expertise across the Harness platform portfolio-including Harness Continuous Integration (CI), Continuous Delivery (CD), Feature Flags, Cloud Cost Management, and Security Testing Orchestration (STO)-and Traceable AI API security capabilities, combined with a comprehensive understanding of modern software delivery practices, API security principles, Zero Trust Architecture, and Federal cybersecurity compliance requirements. This individual must possess the technical depth, architectural vision, and operational discipline required to lead the design, implementation, and sustained operation of enterprise-grade Harness and Traceable capabilities that accelerate secure software delivery and protect Government APIs and applications in a highly regulated federal IT environment.
The Harness/Traceable Integration Engineer (Senior) will serve as the program's primary subject matter expert and technical authority for all Harness and Traceable platform capabilities, leading the architecture, engineering, implementation, administration, and continuous improvement of enterprise software delivery and API security infrastructure. This individual works closely with software developers, security engineers, cloud operations teams, DevSecOps engineers, network security engineers, and Government stakeholders to ensure Harness and Traceable platforms are architected, deployed, and operated in a manner that delivers maximum software delivery velocity, security assurance, API visibility, and compliance with Federal cybersecurity frameworks and Zero Trust Architecture objectives across the full enterprise environment.
Principal responsibilities will include but are not limited to:
Architecture & Engineering Leadership- Serve as the program's technical authority and subject matter expert for all Harness and Traceable platform capabilities, providing authoritative architectural guidance, engineering leadership, and expert technical recommendations to program leadership, functional teams, and Government stakeholders on software delivery pipeline strategy, API security architecture, and DevSecOps implementation.
- Lead the design and architecture of enterprise Harness software delivery solutions, including CI pipeline architecture, CD pipeline design, Security Testing Orchestration (STO) integration, Feature Flag management frameworks, and Cloud Cost Management configurations aligned with program delivery objectives and Federal security requirements.
- Lead the design and architecture of enterprise Traceable AI API security implementations, including API discovery and inventory management, API threat detection and protection, API behavioral analytics, and API security posture management across all Government application environments.
- Develop and maintain enterprise Harness and Traceable architecture documentation, including pipeline architecture diagrams, API security topology diagrams, integration architecture specifications, and platform configuration baselines, ensuring documentation is current, accurate, and aligned with operational reality.
- Lead security architecture reviews for new applications, infrastructure changes, and software delivery pipeline modifications, assessing Harness and Traceable platform impact, identifying security gaps, and recommending configuration and policy improvements.
- Evaluate emerging Harness and Traceable platform capabilities, DevSecOps industry developments, and API security trends, providing well-researched recommendations to program leadership and Government stakeholders on opportunities to advance software delivery maturity and API security posture.
- Provide senior technical leadership and mentorship to junior and mid-level engineers, sharing DevSecOps and API security expertise, guiding technical development, and ensuring consistent application of engineering best practices across the team.
Harness CI/CD Pipeline Engineering & Administration- Lead the engineering, implementation, and administration of enterprise Harness Continuous Integration (CI) and Continuous Delivery (CD) pipelines, designing and implementing scalable, secure, and maintainable pipeline architectures that support rapid, reliable software delivery across all program development teams and application portfolios.
- Design and implement Harness CI pipeline configurations, including build stage definitions, test automation integrations, artifact management configurations, code quality gate integrations, and parallel execution strategies that maximize build velocity and reliability.
- Design and implement Harness CD pipeline configurations, including deployment stage definitions, environment-specific deployment strategies (rolling, blue-green, canary), approval gate workflows, verification configurations, and automated rollback capabilities across development, test, staging, and production environments.
- Implement and maintain Harness pipeline-as-code configurations using YAML-based pipeline definitions, ensuring all pipeline configurations are version-controlled, well-documented, templated for reuse, and maintainable by development teams.
- Develop and maintain Harness pipeline templates, step libraries, and reusable pipeline components, promoting pipeline consistency, reducing duplication, and accelerating pipeline development across the program's application portfolio.
- Implement and maintain Harness connector configurations for all integrated platforms, including source code repositories (GitHub, GitLab, Bitbucket), artifact registries (JFrog Artifactory, Docker Hub, AWS ECR), Kubernetes clusters, cloud providers, and notification platforms.
- Configure and maintain Harness environment and infrastructure definitions, ensuring deployment targets are accurately represented, access-controlled, and consistently managed across all pipeline stages and deployment contexts.
- Monitor Harness CI/CD pipeline health, build success rates, deployment frequency, lead time, and change failure rates, proactively identifying and resolving pipeline failures, performance bottlenecks, and reliability issues.
Harness Security Testing Orchestration (STO) Engineering- Lead the engineering, implementation, and administration of Harness Security Testing Orchestration (STO) capabilities, designing and implementing a comprehensive security testing integration framework that embeds automated security testing throughout the CI/CD pipeline lifecycle.
- Design and implement STO scanner integrations across all relevant security testing tool categories, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), container image scanning, and Infrastructure as Code (IaC) security scanning.
- Configure and maintain STO security gate policies, defining risk-based vulnerability thresholds, exemption management procedures, and pipeline enforcement rules that automatically block or flag deployments containing unacceptable security risks.
- Implement and maintain STO deduplication, normalization, and correlation capabilities, ensuring security findings from multiple scanner sources are accurately consolidated, prioritized, and presented to development teams in a clear, actionable format.
- Develop and maintain STO exemption management workflows, ensuring security finding exemptions are properly reviewed, approved, documented, and time-limited in accordance with defined governance procedures and risk acceptance criteria.
- Integrate STO security findings with the enterprise vulnerability management program and SIEM platform, ensuring pipeline security scan results are incorporated into the program's broader vulnerability tracking and security monitoring workflows.
- Monitor STO pipeline integration health, scanner coverage, and security gate effectiveness, proactively identifying and resolving scanner failures, coverage gaps, and policy enforcement issues.
Harness Feature Flags Engineering & Administration- Lead the engineering, implementation, and administration of Harness Feature Flags capabilities, designing and implementing a comprehensive feature flag management framework that supports controlled feature releases, A/B testing, progressive delivery, and kill switch capabilities across the program's application portfolio.
- Design and implement Harness Feature Flag SDK integrations across all relevant application development languages and frameworks, ensuring feature flag capabilities are consistently available and properly implemented across all supported applications.
- Configure and maintain Harness Feature Flag environments, targeting rules, and flag lifecycle management policies, ensuring feature flags are properly governed, regularly reviewed, and retired in accordance with defined flag lifecycle management procedures.
- Develop and maintain feature flag governance standards, ensuring flags are properly named, documented, scoped, and managed throughout their lifecycle to prevent flag accumulation and technical debt.
Harness Cloud Cost Management Engineering- Lead the engineering, implementation, and administration of Harness Cloud Cost Management capabilities, providing comprehensive cloud cost visibility, optimization recommendations, and governance enforcement across enterprise cloud environments.
- Configure and maintain Harness Cloud Cost Management integrations with enterprise cloud accounts, including AWS and Microsoft Azure, ensuring accurate cost attribution, resource tagging enforcement, and budget alerting are consistently applied.
- Develop and maintain cloud cost dashboards, reporting configurations, and cost anomaly alerting capabilities, providing program leadership and Government stakeholders with accurate, timely visibility into cloud spending trends and optimization opportunities.
- Support cloud cost optimization activities, identifying and implementing cost reduction opportunities through rightsizing recommendations, reserved instance analysis, idle resource identification, and workload scheduling optimizations.
Traceable AI API Security Engineering & Administration- Lead the engineering, implementation, and administration of the Traceable AI API security platform, designing and implementing comprehensive API discovery, inventory management, threat detection, and protection capabilities across all Government application environments.
- Design and implement Traceable agent deployments across all in-scope application environments, including Kubernetes-hosted applications, cloud-native services, and on-premises application deployments, ensuring comprehensive API traffic visibility and behavioral baseline collection.
- Configure and maintain Traceable API discovery and inventory management capabilities, ensuring all APIs-including undocumented, shadow, and zombie APIs-are continuously discovered, inventoried, and assessed for security risk across the enterprise application portfolio.
- Implement and maintain Traceable API threat detection policies, including API abuse detection rules, injection attack protection, authentication bypass detection, sensitive data exposure monitoring, and API-specific behavioral anomaly detection configurations.
- Configure and maintain Traceable API security posture management capabilities, ensuring APIs are continuously assessed for security misconfigurations, authentication weaknesses, excessive data exposure, and compliance with defined API security standards and OWASP API Security Top 10 requirements.
- Develop and maintain Traceable API behavioral analytics configurations, including user and service baseline modeling, anomalous traffic pattern detection, and API-level rate limiting and throttling policies.
- Integrate Traceable API security findings with the enterprise SIEM platform, vulnerability management program, and incident response workflows, ensuring API threat detections and security posture findings are incorporated into the program's broader security monitoring and remediation processes.
- Monitor Traceable platform health, agent coverage, and detection output quality, proactively identifying and resolving platform issues, API coverage gaps, and detection fidelity problems.
API Security Governance & Standards- Develop and maintain enterprise API security standards, governance frameworks, and design guidelines, ensuring all Government APIs are developed, deployed, and maintained in accordance with defined security requirements and industry best practices.
- Conduct API security architecture reviews for new and existing Government applications, identifying security risks, recommending remediation actions, and ensuring APIs meet defined security standards before deployment to production environments.
- Develop and maintain API security assessment and testing procedures, supporting periodic API security assessments and integrating API security testing into the CI/CD pipeline through Harness STO and Traceable integrations.
- Provide expert API security guidance to application development teams, supporting secure API design, authentication and authorization implementation, input validation, and sensitive data handling best practices.
DevSecOps Integration & Automation- Lead the integration of Harness and Traceable platforms with the broader enterprise DevSecOps toolchain, ensuring seamless data exchange, automated workflow triggers, and consistent security policy enforcement across all integrated platforms.
- Develop and maintain Harness and Traceable platform API integrations and automation scripts, leveraging platform APIs to implement custom automation workflows, reporting capabilities, and integration bridges between Harness, Traceable, and adjacent enterprise platforms.
- Support the implementation of GitOps delivery patterns using Harness CD, ensuring application and infrastructure configurations are managed declaratively through version-controlled Git repositories with automated synchronization to target environments.
- Integrate Harness pipelines with enterprise secrets management platforms, including HashiCorp Vault and cloud-native secrets managers, ensuring sensitive credentials and configuration data are securely managed throughout pipeline execution.
- Develop and maintain pipeline observability and analytics capabilities, ensuring Harness pipeline performance metrics, deployment frequency data, and DORA metrics are accurately collected, reported, and integrated into program delivery performance dashboards.
Change Management & Operations- Lead the preparation and submission of Harness and Traceable change requests for Change Advisory Board (CAB) review, developing comprehensive implementation plans, technical impact assessments, rollback procedures, and test plans for all significant platform changes.
- Coordinate with the change management process to ensure all Harness and Traceable platform changes are properly reviewed, approved, scheduled, and implemented without degradation to pipeline operations, security posture, or service availability.
- Conduct post-implementation reviews for significant platform changes, documenting outcomes, unexpected impacts, and lessons learned to continuously improve change execution practices.
- Develop and maintain comprehensive Harness and Traceable operational runbooks, standard operating procedures, and knowledge base articles, ensuring documentation supports reliable and consistent platform operations.
Compliance, ATO & Continuous Monitoring- Ensure all Harness and Traceable platforms are configured and maintained in compliance with applicable Federal cybersecurity frameworks and requirements, including NIST SP 800-53, FISMA, FedRAMP, NIST SP 800-207 Zero Trust Architecture, OMB M-22-09, applicable DISA STIGs, and client-specific cybersecurity policies.
- Support ATO activities for Harness and Traceable platforms, including security control implementation documentation, system security plan (SSP) contribution, continuous monitoring reporting, and audit evidence collection.
- Conduct regular platform configuration compliance assessments, identifying and remediating configuration deviations from applicable security baselines and Federal compliance requirements.
- Support vulnerability management activities for Harness and Traceable platforms, tracking and remediating platform vulnerabilities identified through vendor advisories, vulnerability scanning, and continuous monitoring activities.
- Develop and maintain platform compliance documentation, including configuration baseline specifications, security control implementation evidence, and audit artifacts supporting the program's ATO and continuous monitoring obligations.
Education and Experience:Required:- Bachelor's degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related field from an accredited college or university. Equivalent combination of education and directly relevant experience may be considered.
- Minimum of 7 years of hands-on experience in DevSecOps engineering, software delivery pipeline development, application security, or a closely related discipline within a federal government IT contracting or enterprise software delivery environment.
- Demonstrated hands-on experience designing, implementing, and administering enterprise CI/CD pipeline platforms, with at least 2-3 years of direct Harness platform experience or extensive experience with comparable enterprise CI/CD platforms (e.g., Jenkins, GitLab CI/CD, Azure DevOps) combined with demonstrated Harness platform knowledge.
- Experience with API security engineering, including API discovery, API threat detection, and API security posture management concepts and tools.
- Experience supporting software delivery or application security activities in a federal government IT contracting environment, including familiarity with applicable Federal cybersecurity compliance frameworks.
- Active security clearance or the ability to obtain and maintain a government background investigation and all requisite IT access authorizations. Specific clearance requirements will be confirmed at time of offer.
Preferred:- Prior experience serving as a senior Harness platform engineer or architect on a federal IT program of comparable scale and complexity.
- Hands-on experience with Traceable AI or equivalent API security platform engineering and administration.
- Experience supporting FedRAMP authorization activities and implementing DevSecOps security controls within AWS GovCloud and/or Microsoft Azure Government environments.
Required Skills and Competencies:- Deep technical expertise with enterprise CI/CD pipeline platform engineering, with demonstrated hands-on proficiency in pipeline design, pipeline-as-code development, deployment strategy implementation, security testing integration, and pipeline reliability management.
- Strong Harness platform expertise, including demonstrated proficiency with Harness CI, Harness CD, Harness STO, pipeline template development, connector management, and environment and infrastructure definition configuration.
- Strong API security engineering skills, including demonstrated experience with API discovery, API inventory management, API threat detection, API behavioral analytics, and OWASP API Security Top 10 remediation.
- Solid understanding of DevSecOps principles and practices, including shift-left security integration, security testing automation, secrets management, infrastructure as code security, and supply chain risk management as applied within enterprise CI/CD pipelines.
- Experience with container and Kubernetes environments, including Kubernetes-based application deployment patterns, Helm chart management, and container security practices as they relate to Harness CD and Traceable agent deployment.
- Knowledge of Federal cybersecurity frameworks and compliance requirements, including NIST SP 800-53, FISMA, FedRAMP, NIST SP 800-207 Zero Trust Architecture, OMB M-22-09, and applicable DISA STIGs.
- Strong proficiency with scripting and programming languages, including Python, Bash, PowerShell, or equivalent, for pipeline automation, platform API integration, and operational tooling development.
- Experience with cloud platform operations across AWS and/or Microsoft Azure Government environments, including cloud-native service integration with CI/CD pipelines and cloud security control implementation.
- Strong understanding of GitOps principles and version-controlled infrastructure and application configuration management practices as applied within enterprise software delivery environments.
- Excellent written and verbal communication skills with demonstrated ability to develop comprehensive architecture documentation, operational runbooks, and technical briefing materials for both technical and non-technical audiences.
- Strong leadership and mentorship skills with demonstrated ability to provide technical guidance and develop the capabilities of junior and mid-level team members.
Desired Skills and Competencies:- Harness Certified Engineer or equivalent Harness platform certification - strongly preferred.
- Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security
Our Equal Employment Opportunity Policy:
The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or to apply to a position on our website, please contact Heaven Wood via e-mail at or by calling to request accommodations.
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit ;br>
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352
