Responsibilities
- Build, maintain, and optimize CI/CD pipelines for multi-platform builds (Windows, macOS, Linux)
- Work with YAML configurations, pipeline stages, artifacts, and deployment workflows
- Integrate security and vulnerability scanning tools directly into the CI/CD pipeline to support automated compliance validations (DevSecOps)
- Help maintain and improve AWS infrastructure including ECS/Fargate deployments, RDS databases, Route53 DNS, VPC networking, and IAM policies
- Support multi-tenant, multi-region, and highly isolated or public-sector specific cloud architectures (e.g., AWS GovCloud deployments)
- Work with Docker containers, ECS task definitions, and ECR registries
- Deploy and manage containerized Node.js applications in production environments
- Assist in the implementation of hardened container base-images aligned with federal or highly-regulated industry security benchmarks
- Help manage release processes including version promotion, release channels (canary, beta, stable), and automated deployment to staging and production environments
- Support PostgreSQL on AWS RDS — backups, SSH tunneling through bastion hosts, read-only user management, and database configuration for multi-tenant environments
- Write and maintain automation scripts in Bash, PowerShell, Python, and Node.js
- Build tools to improve infrastructure reliability and developer experience
- Help maintain web-based DevOps tools built with Express.js, React, and TypeScript — tools for cloud settings management, tenant provisioning, and deployment monitoring
Requirements
- GitLab CI/CD: Experience with GitLab CI/CD pipelines — YAML configuration, stages, jobs, artifacts, rules, dependencies
- Understanding of CI/CD best practices and pipeline optimization
- AWS Cloud Fundamentals: Production level experience with core AWS services — EC2, ECS/Fargate, RDS, Route53, VPC, IAM, Secrets Manager, CloudWatch
- Comfortable navigating the AWS Console and CLI
- Multi-Platform Scripting: Solid scripting skills in Bash (Linux) and PowerShell (Windows)
- Ability to write maintainable automation scripts for both platforms
- Containerization: Hands-on Docker experience — building images, writing Dockerfiles, docker-compose, understanding container networking, and working with ECS/ECR
- Build Systems: Experience with build tools and package managers — npm/Node.js, .NET/NuGet, Python packaging
- Understanding of dependency management and build artifacts
- Version Control: Strong Git fundamentals — branching strategies, merge requests, tagging
- Experience with GitHub (or GitLab) workflows and code review practices
- Linux/Unix & Windows: Comfortable in both environments — SSH, file permissions, package managers, systemd, PowerShell
- Understanding of cross-platform operational challenges
- Node.js/JavaScript: Comfortable reading and writing JavaScript/Node.js code
- Experience with npm, package.json, and basic Express.js applications for tooling
- Functional knowledge of federal compliance frameworks like FedRAMP, NIST SP 800-53, DISA STIGs, or DoD Cloud SRG (IL4-IL6)
- U.S. citizenship is mandatory
- Ability to function effectively under stringent change control processes, regular auditing, and detailed documentation standards
Nice to Have
- Kubernetes experience (EKS, GKE, AKS) or willingness to learn, we're migrating from ECS to K8s
- Multi-cloud experience (Azure, GCP) or cloud-agnostic architecture knowledge
- GitLab Runner administration and configuration
- AWS CDK or CloudFormation for Infrastructure as Code
- Terraform for multi-cloud infrastructure management
- TypeScript development experience
- PostgreSQL database administration and optimization
- .NET build systems and NuGet package management
- React or frontend framework experience
- Airflow or workflow orchestration tools
- Helm charts and Kubernetes manifest management
- Familiarity with FIPS 140-2/3 cryptographic compliance standards
- Hands-on experience with GitHub Actions administration and environment scaling
- Exposure to enterprise secret management tools like HashiCorp Vault or CyberArk
- Direct support of ATO (Authority to Operate) processes and eMASS documentation
Benefits
- Generous Paid Time Off, Paid Holidays & Sick Time
- Competitive & Comprehensive Health Insurance
- Thoughtfully-Planned Paid Parental Leave
- Financial Well-Being Plans (FSA) (401k) (Life Insurance)
- Stock Options
- Professional Development Courses
- Employee Resource Groups
- One Medical - Free Membership
- Talkspace - Mental Health Therapy 24/7
- Team Lunches
- Casual dress code
- Commuter Benefits (NYC employees only)
- Citibike (NYC employees only)