Sr DevSecOps Engineer

About Science and Technology Corporation

About Science and Technology Corporation (STC): STC is a U.S. government contractor providing scientific engineering and technical support to federal agencies with deep roots in NOAA NASA and DoD programs. Founded in 1979 and headquartered in Hampton VA STC staff support a growing number of operational missions that monitor the Earth through Earth-observing systems and satellite platforms and through direct field research. STC also researches and investigates leading-edge observing technologies and assesses their applicability to operational missions. STCs NOAA Programs team supports a broad range of operational meteorological environmental and geospatial programs.

About the AWIPS HIVE Program

STC is seeking candidates to support the National Weather Service (NWS) on the AWIPS Application Environment contract (commonly referred to as HIVE). AWIPS (Advanced Weather Interactive Processing System) is the mission-critical platform used by forecasters at National Weather Service sites nationwide to analyze environmental data and issue the forecasts watches and warnings that protect lives and property. Under the HIVE modernization initiative STC provides engineering and technical talent in direct support of a major cloud transformation effort to move AWIPS from a legacy desktop system to a modern cloud-native web application built on Amazon Web Services (AWS). The program operates in a collaborative Agile environment and involves migrating complex operational meteorological workflows tools and data visualization capabilities to a microservices-based architecture with a React/TypeScript frontend and Java/Spring Boot microservices backend.

About This Role

STC is hiring a Senior DevSecOps Engineer to build and operate the cloud platform behind the HIVE safety-of-life weather-warning system for the National Weather Service. The platform runs on AWS with Kubernetes (EKS) a fully GitOps deployment model and infrastructure defined entirely as code. This is a FISMA-Moderate environment actively maturing toward a multi-account federal landing zone placing this role at the intersection of platform engineering security and compliance. You will be a senior hand on a small high-trust team moving real infrastructure through code and pipelines rather than tickets and click-ops.

Specific Duties Will Include

• Own Terraform for a multi-environment multi-account AWS estate: modules state management and safe reconciliation of live infrastructure into code

• Operate Amazon EKS clusters; networking autoscaling add-ons workload identity (IRSA/Pod Identity) and cluster lifecycle

• Run and extend the GitOps delivery model using ArgoCD where a merge is a deployment

• Build and harden CI/CD pipelines in GitLab: security scanning secrets detection policy-as-code container image scanning and signing and the evidence trail behind them

• Advance the programs security and compliance posture against NIST 800-53: least-privilege IAM network isolation continuous monitoring and ATO artifacts

• Support the migration to a federal multi-account landing zone: identity cross-account networking and environment promotion

• Mentor mid- and junior engineers; raise the bar on change control review discipline and evidence-based engineering

• Bachelors degree in Computer Science Software Engineering or related field

• 5-7 years in infrastructure platform or DevOps with senior ownership of production systems

• Deep hands-on Terraform: reusable modules remote state drift reconciliation without breaking production

• Strong AWS depth: VPC and networking IAM EKS RDS/Aurora S3 CloudFront Secrets Manager

• Kubernetes/EKS at production scale: workload identity (Pod Identity/IRSA) Helm autoscaling ingress and load balancing

• GitOps experience (ArgoCD or Flux) and CI/CD pipeline engineering (GitLab CI strongly preferred)

• DevSecOps in practice: SAST/container/IaC/secrets scanning policy-as-code (OPA/conftest) and the discipline to make gates actually gate

• Working knowledge of a federal compliance framework (FISMA/NIST 800-53/RMF) and ATO support requirements

• 5 years of experience with AWS cloud services and development

• 5 years of experience with containerization (Docker) and orchestration (ECS EKS)

Preferred Qualifications

• Multi-account AWS landing zone/Control Tower/Organizations design experience

• Container supply-chain security: SBOMs image signing (Notation/AWS Signer) admission control

• Observability with CloudWatch and/or Grafana

• FedRAMP or GovCloud exposure

• AWS Certifications (Developer Associate Solutions Architect)

• Weather geospatial or scientific-data domain background

• Knowledge of infrastructure-as-code tools including CloudFormation/CDK/Terraform

Work Arrangement

Fully remote.

Citizenship Requirement

US Citizenship or Permanent Resident status required.