- Location: Washington, DC (3 days/week on-site).
- Location: Washington, DC (3 days/week on-site).
Benefits:
Expression offers competitive salaries and benefits, such as:
- 401k matching
- PPO and HDHP medical/dental/vision insurance
- Education reimbursement
- Complimentary life insurance
- Generous PTO and holiday leave
- Onsite office gym access
- Commuter Benefits Plan
Responsibilities:
Cloud Infrastructure & Automation
- Deploy, configure, and maintain Azure resources supporting unclassified and classified spectrum management systems.
- Create and update Infrastructure as Code using established patterns and tools such as Terraform, Bicep, or ARM templates.
- Build and maintain Docker images and support container deployments using Kubernetes and Helm.
- Configure networking, access controls, and environment settings in coordination with senior engineers and security personnel.
- Develop and maintain Azure DevOps pipelines that automate application builds, testing, and deployments.
- Integrate and maintain code, dependency, container image, and infrastructure security checks using established tools and processes.
- Maintain deployment scripts, pipeline templates, artifacts, and release configurations, and support release approvals.
- Support deployments within restricted environments, following approved procedures for software dependencies and artifact handling.
- Work with developers to troubleshoot pipeline failures, deployment issues, and configuration differences across development, test, and production environments.
- Implement and maintain assigned security controls in accordance with applicable Department of Commerce, NTIA, and federal requirements.
- Apply approved configuration baselines and STIGs where required, and remediate identified vulnerabilities with guidance from security personnel.
- Support RMF, ATO, and continuous monitoring activities by collecting technical evidence and tracking remediation actions.
- Maintain secure handling of credentials, secrets, and deployment artifacts throughout the delivery process.
- Configure and maintain monitoring, centralized logging, and alerts using established tools and standards.
- Investigate infrastructure and application issues, review logs, and support incident response and root cause analysis.
- Execute and help test backup, recovery, and rollback procedures.
- Keep deployment documentation, configuration records, and operational runbooks current.
- Support new application releases and production transitions in coordination with the broader engineering team.
CI/CD & Secure Software Delivery
Security & Compliance
Reliability & Operations
Qualifications:
- Active Secret security clearance or higher is required.
- Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
- Bachelor’s degree in Computer Science, Engineering, or a related field and three or more years of relevant DevOps/cloud engineering experience, or five or more years of relevant experience in lieu of a degree.
- Hands-on experience deploying and maintaining infrastructure in Microsoft Azure.
- Experience creating, modifying, and troubleshooting Azure DevOps YAML pipelines for builds, testing, security scanning, and deployments.
- Experience supporting application deployments across development, test, and production environments.
- Practical experience using Infrastructure as Code tools such as Terraform, Bicep, ARM templates, or comparable technologies.
- Experience building and running containers using Docker, with working knowledge of Kubernetes and Helm.
- Ability to write and troubleshoot automation scripts using Python, PowerShell, Bash, or similar languages.
- Experience using Git-based version control, including branches, pull requests, and collaborative code reviews.
- Working knowledge of Linux administration, cloud networking, access controls, secrets management, and monitoring and logging.
- Ability to investigate technical issues, document solutions, communicate progress, and work independently on assigned tasks while collaborating with the team.
Preferred Qualifications:
- Experience with Azure Government, Azure Government Secret, or other restricted federal environments.
- Experience supporting federal system modernization or operational cloud services.
- Familiarity with NIST SP 800-53 controls, RMF, ATO support activities, or STIGs.
- Experience using security scanning tools such as Nessus, SonarQube, Microsoft Defender for Cloud, Aqua Security, or comparable products.
- Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
- Familiarity with database or search platforms such as SQL Server, PostgreSQL, Elasticsearch, or OpenSearch.
- Exposure to data engineering or machine learning workloads, including platforms such as Databricks or Apache Spark.
- Relevant Microsoft Azure administration, development, DevOps, or security certifications.