Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500+ professionals delivering Digital Services, Advanced Analytics, Artificial Intelligence/Machine Learning, Cyber Security and Cutting-Edge Technology across the US Government. Be a part of something special! The DevSecOps Lead is responsible for architecting, securing, and operating GitLab Enterprise pipelines within the Army's ECMA (cARMY) cloud environment. This role ensures deterministic, repeatable, and fully auditable build and deployment workflows across containerized services, EC2-based runners, ECS-deployed applications, and Postgres-backed systems. The position is central to maintaining enterprise-grade DevSecOps readiness, enforcing compliance controls, and enabling rapid, reliable delivery of mission software. Responsibilities: Pipeline Architecture & Operations - Design, implement, and maintain GitLab Enterprise CI/CD pipelines for Java/Spring Boot and containerized applications - Manage EC2-based GitLab runners, autoscaling groups, and secure execution environments - Build and maintain deployment workflows targeting Amazon ECS (Fargate or EC2 launch types) - Implement artifact versioning, promotion workflows, and environment-specific deployment gates - Ensure pipelines support deterministic AI-generated code integration and reproducible builds Security, Compliance & cARMY Integration - Ensure all pipelines comply with Army ECMA/cARMY security policies, boundary controls, and audit requirements - Integrate STIG-aligned scanning, dependency checks, SAST/DAST, and container security tooling - Maintain traceability and documentation required for ATO, RMF, and continuous monitoring - Enforce least-privilege IAM roles, credential management, and secure secrets handling Automated Testing & Quality Gates - Integrate JUnit, mocking frameworks, and automated test suites into CI/CD workflows - Ensure pipelines enforce quality gates before merge, promotion, or deployment - Support integration testing, smoke testing, and environment validation steps Infrastructure & Environment Management - Manage container registries, image hardening, and secure image lifecycle - Support ECS service deployments, task definitions, and container orchestration workflows - Coordinate EC2, VPC, networking, IAM, and ECS cluster configurations with platform teams - Support Postgres database provisioning, migrations, and pipeline-driven schema updates - Maintain environment parity across dev, test, staging, and production Cross-Team Collaboration - Work closely with developers, integration teams, QA, cybersecurity, and platform engineering - Provide guidance on pipeline readiness, deployment blockers, and DevSecOps best practices - Support release readiness reviews and operational documentation Required Qualifications: - 10+ years experience in software development, DevOps, or platform engineering - 5+ years hands-on experience with GitLab CI/CD in enterprise environments - Experience operating pipelines with containers, EC2 runners, ECS deployments, and Postgres - Strong background in secure DevSecOps practices, automated testing, and pipeline governance - Familiarity with DoD cloud environments, preferably cARMY / ECMA - Experience integrating SAST/DAST, dependency scanning, and container security tools- Strong understanding of microservices, container orchestration, and cloud networking Education: - Bachelor's degree in Computer Science, Information Systems, Software Engineering, or related field - Master's degree preferred - Ability to work effectively in a remote, distributed engineering environment Clearance: Active Secret security clearance required Halvik offers a competitive full benefits package including: Company-supported medical, dental, vision, life, STD, and LTD insurance Benefits include 11 federal holidays and PTO Eligible employees may receive performance-based incentives in recognition of individual and/or team achievements. 401(k) with company matching Flexible Spending Accounts for commuter, medical, and dependent care expenses Tuition Assistance Charitable Contribution matching Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. Halvik's pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

• Monitor Production Systems: Use monitoring tools (e.g., Cloud Monitoring) to ensure the health and performance of cloud-based production systems on Google Cloud Platform (GCP). • Incident Management: Respond to production incidents, triage issues, and ensure timely resolution. Perform root cause analysis (RCA) and document findings. • Performance Tuning: Analyze system performance, identify bottlenecks, and make recommendations for improvements to optimize service reliability, scalability, and speed. • System Alerts and Incident Escalation: Set up and maintain system alerts to proactively detect issues. Escalate critical issues to appropriate teams and ensure swift resolution. • Collaboration with Engineering: Work closely with development and operations teams to ensure smooth production releases, provide feedback on system performance, and implement monitoring solutions for new services. • System Documentation: Maintain documentation related to system configurations, monitoring setups, and incident resolutions to create knowledge-sharing practices across teams. • Service Level Agreements (SLAs): Track and report on SLA performance, ensuring that production services meet predefined availability and reliability standards. • Proactive System Health Checks: Conduct routine system health checks, reviewing logs and performance metrics, to ensure system uptime. • Disaster Recovery and Backup: Monitor backup systems and ensure that disaster recovery procedures are in place and tested.

• Act as a technical resource for SRE practices on GCP, ensuring consistent uptime and performance across various environments. • Champion DevOps best practices by applying Infrastructure as Code (IaC) principles using tools like Terraform, Ansible, or Deployment Manager. • Drive monitoring initiatives using tools such as Grafana, Prometheus, and Stackdriver to ensure deep visibility into system health. • Design, maintain, and optimize CI/CD pipelines using GCP-native tools and industry standards. • Troubleshoot complex production incidents, perform root cause analysis, and foster a proactive, blameless post-mortem culture. • Manage your workload effectively while maintaining clear communication with internal and external stakeholders regarding project progress.

• Architecting Solutions: You will be responsible for designing robust and scalable architectures on GCP to support the organization's applications and services. • Artificial Intelligence Platforms: You will lead efforts to provide agentic AI platform services to ensure Dexcom IT’s ability to scale and meet evolving automation needs. • Infrastructure as Code (IaC): Implementing Infrastructure as Code practices using tools like Terraform or Google Cloud Deployment Manager to automate the provisioning and management of resources across our cloud platforms. • Performance and Cost Optimization: Continuously monitoring and optimizing the performance of cloud systems to ensure optimal resource utilization, scalability, and reliability. • Security and Compliance: Implementing security best practices and ensuring compliance with relevant regulations and standards (e.g., HIPAA, GDPR) in cloud environments. • Collaboration and Documentation: Collaborating with cross-functional teams, including developers, operations, and security teams, to ensure alignment on architecture decisions and implementation strategies. • Stay Updated: Keeping abreast of the latest developments and best practices in cloud computing, especially related to GCP.