PlatformDevSecOps SME

About Science and Technology Corporation

About Science and Technology Corporation (STC): STC is a U.S. government contractor providing scientific engineering and technical support to federal agencies with deep roots in NOAA NASA and DoD programs. Founded in 1979 and headquartered in Hampton VA STC staff support a growing number of operational missions that monitor the Earth through Earth-observing systems and satellite platforms and through direct field research. STC also researches and investigates leading-edge observing technologies and assesses their applicability to operational missions. STCs NOAA Programs team supports a broad range of operational meteorological environmental and geospatial programs.

About the AWIPS HIVE Program

STC is seeking candidates to support the National Weather Service (NWS) on the AWIPS Application Environment contract (commonly referred to as HIVE). AWIPS (Advanced Weather Interactive Processing System) is the mission-critical platform used by forecasters at National Weather Service sites nationwide to analyze environmental data and issue the forecasts watches and warnings that protect lives and property. Under the HIVE modernization initiative STC provides engineering and technical talent in direct support of a major cloud transformation effort to move AWIPS from a legacy desktop system to a modern cloud-native web application built on Amazon Web Services (AWS). The program operates in a collaborative Agile environment and involves migrating complex operational meteorological workflows tools and data visualization capabilities to a microservices-based architecture with a React/TypeScript frontend and Java/Spring Boot microservices backend.

About This Role

STC is seeking a senior Platform/DevSecOps Subject Matter Expert (SME) to provide expert-level leadership and hands-on engineering for the HIVE programs cloud delivery and security posture. This is a deeply technical hands-on role requiring mastery of GitLab CI/CD pipelines Kubernetes deployment GitOps and infrastructure-as-code for a custom application stack comprising micro-frontends APIs and microservices. Security is built into the pipeline not bolted on; you will embed scanning policy enforcement and compliance evidence into the delivery flow and carry it through to FISMA High/FedRAMP ATO.

Specific Duties Will Include

• Lead platform engineering for GitLab CI/CD pipelines (build/test/scan/deploy self-hosted runners) and EKS Auto Mode deployments

• Operate multi-region AWS EKS infrastructure using Helm GitLab Kubernetes Agent and GitOps via ArgoCD

• Manage infrastructure-as-code with Terraform/AWS CDK and oversee container supply chain (ECR signing scanning)

• Implement and govern DevSecOps pipeline security: SAST/DAST/SCA/container/secrets scanning as enforced CI stages

• Enforce policy-as-code using AWS Config SCPs and OPA; drive vulnerability management to closure

• Manage secrets and key management (Secrets Manager KMS) and produce compliance evidence from real CI output

• Build and maintain observability (CloudWatch X-Ray Container Insights CloudTrail Grafana) and threat detection (Security Hub GuardDuty Config SIEM)

• Lead FISMA High/FedRAMP Moderate compliance activities ATO support and pen-test coordination

• Implement Zero Trust architecture least-privilege IAM and workload identity (IRSA)

• Mentor platform and DevSecOps engineers on the program team

• Bachelors degree in Computer Science Information Security or related field

• 12 years of overall experience in platform engineering DevOps and/or DevSecOps

• 7 years hands-on platform/DevOps/DevSecOps ownership

• 4 years hands-on CI/CD with strong GitLab CI/CD proficiency

• 3 years Kubernetes in production (AWS EKS) and Docker

• Hands-on IaC (Terraform/CDK) scripting (Bash/Python) and GitOps (ArgoCD)

• Deep experience with SAST/DAST/SCA/container and secrets scanning as enforced pipeline gates

• 3 years AWS security (IAM GuardDuty Security Hub KMS WAF Config)

• Federal compliance expertise: FISMA FedRAMP NIST 800-53 Zero Trust

Preferred Qualifications

• AWS Solutions Architect or Security Specialty certification

• CKA/CKS (Certified Kubernetes Administrator/Security Specialist)

• Multi-region high-availability operations experience

• Policy-as-code expertise (OPA/Gatekeeper)

• FISMA High or FedRAMP Moderate ATO support experience

• Pen-test coordination and control testing experience

Work Arrangement

Fully remote.

Citizenship Requirement

US Citizenship or Permanent Resident status required.