DevOps Engineer

Security clearance: Top Secret/SCI

DevOps Engineer

Company: LCS Defense
Clearance: Active TS/SCI with Full-Scope Polygraph required
Experience: 5+ years of relevant DevOps engineering experience
Location: Jessup, MD; Arlington, VA; Herndon, VA OR Denver, CO

Position Overview
LCS Defense is seeking a DevOps Engineer to build, maintain, and operate a classified development environment (CDE) and unclassified development infrastructure.
This role supports AWS infrastructure, GitLab administration, CI/CD pipelines, developer workstations, and incident response. The engineer will maintain reliable development services in both standard and air-gapped environments, including a logically isolated environment in an AWS Secret Cloud region.

Key Responsibilities
- Deploy and maintain AWS infrastructure using AWS Cloud Development Kit (CDK) in TypeScript and scripting, including cloud networking configuration.
- Configure and maintain a logically isolated classified development environment in an AWS Secret Cloud region.
- Administer, upgrade, and troubleshoot GitLab in standard and air-gapped configurations, including pipelines, runners, user access, and version control management.
- Support GitLab upgrades to current versions, including planning, validation, and troubleshooting.
- Manage the GitLab runner fleet and resolve traffic and capacity issues to maintain healthy CI/CD pipelines.
- Respond to Severity 2 (Sev2) incidents affecting development infrastructure, driving triage, mitigation, and root cause resolution.
- Monitor system health and perform routine patching and updates across hosted services.
- Provision, patch, and maintain developer desktops and workstations, including Amazon WorkSpaces and DevDesktop environments.
- Manage engineering software tools and licensing, including SolidWorks, Altium, Cameo, and ANSYS HPC.
- Implement and validate two-person, malware-scanned ingress and egress pipelines for transferring data and packages across the classified boundary.
- Build and maintain air-gapped package mirrors for Linux/GNU packages, Python packages, Rust crates, operating system repositories, and Docker images.
- Establish package mirror refresh schedules and track Common Vulnerabilities and Exposures (CVEs) and software licenses.

Required Qualifications
- Active TS/SCI clearance with Full-Scope Polygraph.
- At least 5 years of relevant DevOps engineering experience.
- Experience deploying and maintaining AWS infrastructure using CDK in TypeScript, scripting, and cloud networking configuration.
- Experience supporting isolated AWS environments, including classified development infrastructure.
- Experience administering, upgrading, and troubleshooting GitLab, including air-gapped deployments.
- Experience managing CI/CD pipelines and GitLab runner fleets.
- Strong Linux and Windows administration skills, including Linux command-line tools and shell scripting.
- Experience monitoring infrastructure, applying patches, and maintaining developer workstations.
- Experience responding to infrastructure incidents and performing root cause analysis.
- Experience provisioning WorkSpaces or comparable developer desktop environments.
- Experience managing engineering software tools and licensing.
- Experience implementing controlled data transfers and maintaining air-gapped package repositories, including vulnerability and license tracking.