Senior DevSecOps Consultant – ArgoCD, Kubernetes, AWS

Responsibilities

• Support the hardening and operational security of a modern Kubernetes‑based platform environment aligned to CMMC and Zero Trust principles
• Serve as a hands‑on extension of the Client’s Engineering team
• Focus on implementing and operationalizing key AWS security controls
• Secure critical platform services
• Improve the overall compliance and stability posture of the environment
• Collaborate with platform engineering teams to improve operational stability, compliance posture, and long‑term maintainability
• Develop and maintain Helm charts, Kubernetes manifests, and automation routines supporting platform operations
• Partner with Architecture Review Boards (ARB), security stakeholders, and engineering leadership to validate implementation approaches and compliance requirements
• Produce clear technical documentation, configuration standards, and operational runbooks
• Contribute to operational automation, migration tooling, and platform sustainability initiatives

Requirements

• Must reside within the United States
• Must be authorized to work in the United States without sponsorship now or in the future
• Must be able to pass a background check
• 5+ years of experience in DevSecOps, Platform Engineering, Kubernetes Engineering, or related roles
• Strong hands‑on Kubernetes experience within modern cloud‑native environments
• Deep understanding of GitOps principles and pull‑based deployment workflows
• Hands‑on experience with ArgoCD in production environments is required
• Experience implementing and securing Kubernetes platform services and workloads
• Experience with Infrastructure as Code and declarative platform management approaches
• Experience with Crossplane or similar modern infrastructure provisioning frameworks
• Experience developing and maintaining Helm charts and Kubernetes manifests
• Strong understanding of AWS security controls, hardening practices, and cloud‑native security principles
• Experience implementing RBAC, least‑privilege models, and secure platform access controls
• Familiarity with container networking technologies such as Cilium and/or kube‑proxy
• Scripting or automation experience using Python or similar languages
• Experience working within regulated or compliance‑focused environments (CMMC, NIST 800‑171, FedRAMP, DoD, aerospace/defense, financial services, etc.)
• Strong written and verbal communication skills with the ability to collaborate across security, platform, and engineering teams