Tangram Flex is seeking a DevSecOps / Platform Engineer with 3+ years of experience to provide direct support to our software development teams by leveraging DevSecOps best practices in a team-based environment. In this role, you will use Cloud-Native technologies to build, manage, and optimize CI/CD pipelines and application build environments that support both internal and external customers.
Candidates should possess a solid technical skillset to work closely with software engineers to refine delivery workflows, integrate automated security controls across classified and unclassified networks, and help accelerate Continuous Authority to Operate (cATO) processes.
What We Do: Our team and products provide solutions to enable innovators to design, develop, verify, and advance critical systems, while accelerating innovation that advances our nation's security. By accelerating delivery of critical systems, Tangram is transforming the way our nation solves complex software challenges.
JOB RESPONSIBILITIES
Pipeline Architecture & Software Delivery
- Work alongside software engineers to continuously improve the software delivery workflow.
- Create, manage, and optimize CI/CD pipelines using GitLab CI or alternative deployment platforms.
- Implement and maintain GitOps workflows using FluxCD or ArgoCD to manage cluster state.
- Triage and repair code automation pipelines promptly when build or deployment failures occur.
- Identify and implement opportunities for pipeline caching and performance improvements to shorten build cycles.
Infrastructure & Platform Engineering
- Deliver engineering and IT services using Cloud-Native technologies, AWS GovCloud, and Kubernetes.
- Apply Infrastructure-as-Code (IaC) paradigms (e.g., Terraform) to manage cloud infrastructure and air-gapped environments.
- Containerize applications with common tools, such as Docker, and deploy using Kubernetes and Helm.
- Support deployments across multiple security enclaves (NIPRNet, SIPRNet, JWICS, C2S/SC2S).
Continuous Security & Compliance
- Integrate container and dependency scanning tools into CI/CD pipelines to catch vulnerabilities early.
- Enforce DoD Cyber Security directives, STIGs, and NIST SP 800-53 controls to support cATO initiatives.
- Leverage DoD Enterprise DevSecOps models (such as Platform One or Big Bang) and hardened container repositories (Iron Bank).
Observability & Platform Operations
- Configure observability and monitoring tools (such as Prometheus and Grafana) to proactively identify system issues and performance degradation.
- Evaluate and recommend new tools to continuously adopt and improve Infrastructure Team workflows.
- Create and execute backup, restore, and disaster-recovery plans for core services and platforms.
REQUIRED SKILLS & QUALIFICATIONS
- Education: Bachelor’s degree in Computer Science, IT, Cybersecurity
- Experience: 3+ years of software deployment, software engineering, DevOps, or DevSecOps engineering.
- Clearance: U.S. Citizenship required; must possess or have the ability to obtain and maintain a U.S. Government Security Clearance.
- Willingness and ability to travel up to 20% of work time to client sites, customer locations, and industry conferences
- Core Technical & Software Development Skills:
-
- Demonstrated proficiency with AWS (Fences) or other cloud services, Kubernetes, Docker, and Linux/Bash scripting.
- Hands-on experience with GitLab CI/CD or alternative CI/CD frameworks.
NICE TO HAVE SKILLS & QUALIFICATIONS
- Ability to work flexible hours when supporting deployment windows or operational mission needs.
- DoD Ecosystem: Experience with Air Force Platform One, Iron Bank hardened containers, and AWS C2S/SC2S cloud environments.
- DoD 8570/8140 Compliance: Active IAT Level II or IAM Level II certification (e.g., Security+ CE, CySA+, CISSP).
- Working knowledge of Infrastructure-as-Code paradigms.
- Familiarity with container/dependency scanning tools (e.g., Anchore, Trivy, SonarQube).
- Experience with Prometheus, Grafana, GitLab, and Okta.
WHAT WE OFFER
We are committed to staying rooted in our core value of Team First. For that reason, we've designed a highly competitive benefits program and supportive work environment to engage employees and their families.
- Hybrid work options
- Flexible Working Hours, 10 paid holidays, and generous Paid Time Off
- Employer Paid Medical, Dental, Vision and Short and Long Term Disability Insurance
- Access to group rating plans for Life Insurance
- Employer contribution to Health Savings Account
- Competitive 401K employer match
- A vibrant engineering culture that fosters transparency, collaboration, and continuous professional growth via internal tech community events (Lightning Talks, Integration Events).
Tangram Flex is an Equal Opportunity Employer, and provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in its application procedures and in accordance with federal law. All qualified candidates will receive consideration for employment based on business needs, job requirements, and individual qualifications.
EEO/AA Vet/Disabled Employer/ and E-Verify
