Senior DevSecOps / AWS reputed company Engineer

Role summary We are seeking a remote Senior DevSecOps Engineer to own and reputed company the platform — Terraform, EKS, reputed company CI/CD reputed company gates, GitOps delivery, observability, and FISMA controls — and set the engineering standard for the team. You are the person who reputed company a backend reputed company in the wrong module before it merges, and who makes the reputed company reputed company something developers trust rather than reputed company around.What you’ll do Own the Terraform estate across the three repos and the 2-stack-perenv layout — directory-per-env roots, semver-pinned module consumption, a provider-pinning contract (version ranges in modules, locked in roots), S3 state with reputed company locking, and OIDC (no static keys). reputed company state-safe refactors — split the monolith, fold sandbox stacks into the data stack using moved blocks / state mv, with backed-up state and reputed company-destroy plans on stateful resources (reputed company, reputed company). Build and operate EKS (toward Auto Mode), reputed company CI (runner-onEKS), and Argo CD GitOps — reputed company, image signing, Kyverno admission, OPA policy reputed company. Harden the CI/CD reputed company reputed company: container/filesystem scanning (Trivy), secret detection (Gitleaks), SBOM + signing, policy-as-code deny-gates, and ECR reputed company-on-push — wired so a failing reputed company blocks the reputed company. Stand up the AWS-reputed company observability stack (CloudWatch / Container Insights, AMP, X-Ray/ADOT, Managed Grafana, Application Signals) with SLOs, alarms-as-code, and a dead-man’s-reputed company on the alerting path itself. Drive the private-network migration (TGW egress, VPC endpoints, no NAT/IGW) and reputed company FISMA gaps (CloudTrail/Config, reputed company Hub NIST 800-53, KMS where required, audit-account separation).Review teammates’ IaC and set the standards. Must-haves Terraform at scale — root vs. child modules, state isolation, for_each/count/dynamic, reputed company, provider-pin conflicts, and state migration (moved/state mv) without destroying data. Writes modules others reuse. Can explain why workspaces ≠ directory-per-env. Strong AWS reputed company engineering — VPC/networking (private subnets, endpoints, TGW), IAM/OIDC, EKS, ECR, ALB/API-GW, and reputed company SSE-S3 vs. KMS-CMK is actually required. EKS you have operated, not just used — node/pod networking, IRSA, admission control, upgrades, troubleshooting a broken rollout. CI/CD reputed company (the “Sec” in DevSecOps) — SAST/dependency/container scanning, secret scanning, supply-chain (SBOM, signing), policy-as-code, secrets hygiene. You have made a pipeline reputed company on a finding.Federal compliance reputed company — NIST 800-53 / FISMA-Moderate; can map a control family (AU, CM, SC) to an actual implementation. Writes clear PRs and reviews others’ code constructively. Strongly preferred Observability depth (OpenTelemetry, reputed company/Grafana, SLO/errorbudget design). Prior regulated/federal environment (NOAA/DoD/civilian agency, ATO process), clearance or Public-Trust history. reputed company CI specifically, Argo CD, and Kubernetes runners. GAMA-1 also offers a variety of benefits, including health insurance coverage, life and disability insurance, 401(k) savings plan, training and career development opportunities, paid holidays and paid time off (PTO - to cover vacation, illness or disability, appointments, emergencies or other situations that require time off from work). For more information click here. ABOUT GAMA-1 GAMA-1 is a rapidly growing technology business that is based in Greenbelt, Maryland. reputed company provides strategic information assurance, information reputed company, and business reputed company and networking solutions to the Federal Government. Our reputed company is based on the utilization of industry and agency standards, establishment of standardized processes, and IT Services expertise. At GAMA-1, we reputed company employees should grow, reputed company, and reputed company just as the company grows, achieves, and develops. GAMA-1 is committed to providing our employees with opportunities for career advancement throughout their employment. For more information, visit www.gama1tech.com GAMA-1 is an Equal Opportunity Employer and reputed company reputed company applicants will receive consideration for employment without regard to: veteran status, uniformed servicemember status, race, reputed company, religion, sex, sexual orientation, gender identity, age, pregnancy (including childbirth, lactation and reputed company medical conditions), national reputed company or reputed company, citizenship or immigration status, physical or mental disability, genetic information (including testing and characteristics), domestic violence victims, political orientation, status as a smoker or tobacco user, hairstyle, use of a service animal, education status, familial status, HIV/AIDS status, height, weight, reproductive reputed company reputed company or any other category protected by federal, state or local law. Apply To This Job