Senior DevOps Engineer

hatch I.T. is partnering with Expression to find a Senior DevOps Engineer. See details below:

About The Role:

Expression is seeking an experienced Senior DevOps Engineer to support the National Telecommunications and Information Administration (NTIA) Federal Spectrum Data Systems (FSDS) program within the U.S. Department of Commerce.

The FSDS program supports the modernization of federal spectrum management systems through improved technology, automation, data integration, and interoperability. These systems help NTIA manage federal spectrum use and support essential government missions.

As the DevOps lead for the program, you will design, implement, and maintain secure cloud infrastructure and delivery pipelines supporting applications, data services, and analytics across Azure Commercial, Government, and Secret cloud environments. You will work closely with government stakeholders, software engineers, system administrators, data engineers, and security personnel to move capabilities into production and keep them secure, reliable, and maintainable.

We’re looking for someone who can own the work from infrastructure code through production deployment and leave behind automation and documentation the team can depend on. You will also help newer engineers grow their skills and set the standard for how DevOps work gets done on the program.

Location and Clearance:

• Clearance: Active Secret clearance or higher is required 
• Location: Washington, DC (3 days/week on-site).

About the Company:

Founded in 1997 and headquartered in Washington DC, Expression provides data fusion, data analytics, software engineering, information technology, and electromagnetic spectrum management solutions to the U.S. Department of Defense, Department of State, and national security community. Expression’s “Perpetual Innovation” culture focuses on creating immediate and sustainable value for their clients via agile delivery of tailored solutions built through constant engagement with their clients. Expression was ranked #1 on the Washington Technology 2018's Fast 50 list of fastest growing small business Government contractors and a Top 20 Big Data Solutions Provider by CIO Review.

Responsibilities:

Cloud Infrastructure & Automation

• Lead the design, deployment, and maintenance of Azure infrastructure supporting unclassified and classified spectrum management systems.
• Develop reusable Infrastructure as Code using tools such as Terraform, Bicep, or ARM templates.
• Configure and maintain container platforms using Kubernetes, Docker, and Helm.
• Implement secure networking, identity and access controls, secrets management, and environment configuration.
• Improve infrastructure consistency, scalability, reliability, and cost efficiency across development, test, and production environments.

CI/CD & Secure Software Delivery

• Build and maintain Azure DevOps pipelines that automate application builds, testing, security scanning, and deployments.
• Integrate code, dependency, container image, and infrastructure security checks into delivery workflows.
• Establish repeatable release processes, approval controls, and artifact management.
• Support deployments within restricted environments, accounting for connectivity, tooling, and software dependency constraints.
• Partner with development teams to resolve deployment issues, improve delivery speed and quality, and promote consistent DevOps practices across the program.

Security & Compliance

• Implement and maintain technical controls aligned with applicable Department of Commerce, NTIA, and federal security requirements.
• Apply secure configuration baselines and STIGs where required; identify and remediate infrastructure and application vulnerabilities.
• Support Risk Management Framework (RMF), Authority to Operate (ATO), and continuous monitoring activities through technical documentation, configuration evidence, and remediation tracking.
• Work with government and program security personnel to translate control requirements into practical infrastructure and pipeline safeguards.

Reliability & Operations

• Implement monitoring, centralized logging, and actionable alerts for infrastructure, containers, pipelines, and applications.
• Troubleshoot production issues, support incident response, and address root causes.
• Develop and validate backup, recovery, and rollback procedures.
• Maintain architecture diagrams, deployment documentation, and operational runbooks, and brief government stakeholders on infrastructure status, risks, and recommendations.

Qualifications:

• Active Secret security clearance or higher.
• Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
• Bachelor’s degree in Computer Science, Engineering, or a related field and five or more years of relevant DevOps/cloud engineering experience, or eight or more years of relevant experience in lieu of a degree.
• Hands-on experience designing and operating infrastructure in Azure Commercial and Azure Government.
• Experience building and maintaining Azure DevOps YAML pipelines for automated builds, testing, and deployments.
• Experience delivering software or infrastructure in classified or similarly restricted federal environments.
• Proficiency with Infrastructure as Code, including Terraform, Bicep, ARM templates, or comparable tools.
• Practical experience with Docker, Kubernetes, and Helm, including deployment and troubleshooting.
• Strong scripting skills using Python, PowerShell, Bash, or similar languages.
• Experience with Git-based version control, branching strategies, pull requests, and code reviews, including reviewing and guiding the work of junior engineers.
• Working knowledge of Linux administration, cloud networking, identity and access management, and secrets management.
• Ability to troubleshoot across infrastructure and application layers, document solutions clearly, and work effectively with technical and nontechnical stakeholders, including government customers.

Preferred Qualifications:

• Experience supporting Azure Government Secret environments.
• Experience leading DevOps efforts on federal system modernization programs, including production transitions.
• Familiarity with NIST SP 800-53 controls, RMF, ATO processes, and STIG implementation.
• Experience integrating security tools such as Nessus, SonarQube, Microsoft Defender for Cloud, Aqua Security, or comparable products.
• Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
• Experience supporting database platforms or search services such as SQL Server, PostgreSQL, Elasticsearch, or OpenSearch.
• Familiarity with data engineering and machine learning platforms, including Databricks, Apache Spark, or related technologies.
• Relevant Microsoft Azure administration, DevOps, or security certifications.