• Collaborate with various engineering teams in ClickHouse to design and implement scalable, secure, and highly available systems for ClickHouse. • Establish and manage service level objectives (SLOs) and service level agreements (SLAs) for ClickHouse Cloud. • Ensure all the infrastructure components in ClickHouse Cloud (including Dataplane, Control Plane, ClickHouse Core, etc) have monitoring and alerting in place to ensure timely detection and resolution of incidents. • Enhance and refine incident response processes and post-mortem analysis for any outages in ClickHouse Cloud including working with the support team to communicate to the impacted customers. • Continuously improve the reliability and performance of our ClickHouse services. • Plan, enable, and drive Chaos initiatives across Engineering teams, based upon internal priorities. • Manage on-call processes to respond to performance and reliability issues, and establish best practices for coordinating escalation to resolve issues and minimize downtime.

• Define and evolve reliability standards for the SmarterDx platform, including SLIs, SLOs, and error budgets that align engineering work with customer impact. • Implement a “reliability” platform using Terraform and infrastructure-as-code best practices. • Enhance observability systems (metrics, logs, traces, alerting) to provide actionable insights and reduce mean time to detect (MTTD) and resolve (MTTR). • Lead incident response, drive blameless postmortems, and implement systemic improvements to prevent recurrence. • Reduce operational toil through automation, self-healing systems, and improved deployment and rollback mechanisms. • Provide production support for the SmarterDx platform, applying SRE principles to ensure availability, performance, and data durability. • Research,prototype, and advocate for new reliability practices, tooling, and architectural improvements across the engineering organization.

• Evaluate product designs and architectures against operational excellence standards for availability, security, performance, and cost optimization. • Partner with product development teams to proactively manage cloud capacity planning - anticipating growth and ensuring infrastructure meets performance and scalability requirements. • Plan, implement, and continuously improve a multi-account, multi-region AWS cloud platform with focus on scalability, reliability, performance, and high availability. • Design and maintain infrastructure automation using Terraform, CloudFormation, Ansible, and CI/CD pipelines (GitHub Actions, Atlantis) to accelerate deployments and reduce operational toil. • Develop and manage access control frameworks, implementing IAM policies, roles, and permission boundaries following least-privilege principles. • Implement and maintain observability for the cloud platform including monitoring, alerting, logging, and self-healing automation where applicable. • Document platform designs, operational runbooks, and troubleshooting procedures. • Provide 2nd and 3rd level support, liaise with network teams and third-party vendors for problem resolution, and participate in incident root cause analysis. • Contribute to cloud cost optimization efforts through right-sizing, reserved capacity planning, and resource lifecycle management.

Overview Job Summary Galapagos Federal Systems LLC is seeking a motivated and highly qualified DevSecOps Engineer to support the integration of development, security, and operations practices within a mission-critical Department of Defense (DoD) system. This role enables the continuous delivery of secure, high-quality software supporting more than 6,500 users across the DoD enterprise, including coordinators, victim advocates, and legal, investigative, and command personnel. In this position, you will help maintain and enhance a system that manages sensitive case-level data, requiring strict adherence to DoD cybersecurity standards and security controls. Working within an Agile development environment, you will participate in regular sprint cycles delivering bug fixes, urgent priority updates, and minor system enhancements while ensuring the platform maintains system availability of 99.5% or higher. The ideal candidate will bring strong experience in CI/CD pipeline automation, secure development practices, and DevSecOps methodologies, along with a solid understanding of the DoD Risk Management Framework (RMF). Your contributions will help ensure the system remains secure, resilient, and capable of supporting evolving mission requirements. Key Responsibilities The DevSecOps Engineer will: - Design, implement, and maintain DevSecOps CI/CD pipelines that support secure, automated software delivery - Automate functional testing and integrate automated test cases into the DevSecOps pipeline prior to deployment authorization - Ensure system deliverables are architected to fully leverage Continuous Integration and Continuous Delivery (CI/CD) capabilities - Support quarterly Agile sprint cycles, delivering bug fixes, emergency priority updates, and minor system enhancements - Apply DoD Application Security and Development (ASD) STIG requirements to software architecture, development, and deployment processes - Implement secure coding best practices, including adherence to OWASP security principles - Conduct application security scans using tools such as Fortify and Sonatype, and remediate or mitigate identified vulnerabilities in accordance with Cyber Hardening Policies - Support the migration and deployment of applications to Cloud Service Providers (CSPs) in compliance with the DoD Cloud Computing Security Requirements Guide (SRG) - Operate and maintain development, test, and production environments within IL4 or IL5 cloud environments supporting Controlled Unclassified Information (CUI) - Collaborate with development, operations, and security teams to ensure systems remain secure, compliant, and operationally resilient Responsibilities Skills and Experience The DevSecOps Engineer must have: - DoW Clearance not Required. Ability to obtain and maintain a Tier 3 (T3) background investigation for Noncritical-Sensitive position; Tier 5 (T5) required for privileged access role - Prior experience supporting DMDC or DHRA systems - Experience designing and managing CI/CD pipelines and DevSecOps automation frameworks - Experience working within AWS GovCloud or other DoD-authorized cloud environments - Strong technical experience with Oracle databases, SQL, Apache, and Tomcat environments - Experience with DevSecOps and security tools such as Jenkins, Fortify, Sonatype, and JIRA - Knowledge of DoD Risk Management Framework (RMF) processes and eMASS - Experience implementing NIST SP 800-53 security controls and DISA STIG requirements - Familiarity with Agile/Scrum development methodologies - Strong understanding of secure coding practices and OWASP security standards - Experience with MicroStrategy reporting platforms Education and Certifications The DevSecOps Engineer must meet the following: Required - U.S. Citizenship - CompTIASecurity+ CE (DoW 8140/8570 compliant) Preferred - Bachelor’s degree in Engineering, Computer Science, Information Technology, Systems Engineering, or a related technical discipline - DoW 8140 cybersecurity workforce certifications Benefits - Medical, dental, vision, disability, and life insurance - Flexible Spending Accounts - 401(k) - PTO - Paid Parental Leave - Tuition reimbursement - Paid federal holidays Security Clearance Must be a U.S. Citizen. A high-level Department of Defense active security clearance is/may be required. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to government information. Physical Requirements Work may involve sitting or standing for extended periods of time and typing and reading from a computer screen. The candidate must have enough mobility, including bending, reaching, and kneeling, to complete daily duties in a prompt and efficient manner, and that may include lifting up to thirty pounds, as necessary. Company Summary Headquartered in Hawaii, Galapagos Federal Systems, LLC, is an SBA-Certified NHO-owned 8(a) Small Business specializing in global information technology solutions. We deliver professional services in IT Design & Installation, Cybersecurity Engineering & Support, Application Integration & Development, Software & Hardware Engineering, Network & Systems Management, Information Systems Security, and Business Management Services. Leveraging over 30 years of providing IT services to the federal & commercial market with projects found around the world, our team has innovative expertise in the development of a wide range of technological solutions. Galapagos Federal Systems, LLC is an equal opportunity employer. Our service commitment is simple - "Quality IT Solutions... On Time & On Budget." Company Employment Statement Galapagos Federal Systems, LLC reserves the right to change or modify job duties and assignments at any time. The above job description is not all encompassing as positions, functions, and qualifications may vary depending on business needs. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Galapagos Federal Systems, LLC is an equal opportunity employer and does not discriminate against applicants based on race, color, creed, religion, medical condition, legally protected genetic information, national origin, sex (including pregnancy, childbirth, or related medical condition), sexual orientation, gender identity and expression, age, disability, or Vietnam era, or other eligible veteran status or legally protected characteristics. Posted Salary Range USD $145,000.00 - USD $150,000.00 /Yr.