• Design, build, and maintain automated golden image creation pipelines for Linux-based VM and container base images, enforcing CIS hardening standards at build time and validating compliance before promotion through configuration management tooling • Implement and manage automated Linux patching workflows • Build and maintain configuration management pipelines to continuously enforce hardened baselines across Linux workloads, detecting and remediating drift • Integrate security scanning (vulnerability, secrets, SBOM, and compliance) into CI/CD pipelines • Implement policy-as-code controls to enforce security guardrails preventing non-compliant workloads and misconfigured systems from reaching production • Own the golden image factory from upstream source validation through automated CIS benchmark testing and image promotion gates, covering both VM and container images used in CI/CD • Manage secrets lifecycle and distribution ensuring no secrets are baked into images • Respond to configuration drift, vulnerability alerts, and patch compliance gaps with root-cause analysis and durable automation fixes rather than one-off manual remediation • Instrument telemetry pipelines to surface image drift, configuration deviation, and unpatched CVEs in near-real time

• Assist in the development, maintenance, and monitoring of CI/CD pipelines using tools such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps. • Support infrastructure as code (IaC) efforts using tools like Terraform, CloudFormation, or ARM templates. • Help integrate security scanning and compliance checks into build and deployment pipelines (SAST, DAST, dependency scanning, container scanning). • Support cloud infrastructure in AWS, Azure, or GCP, with an emphasis on security best practices. • Assist with containerization efforts using Docker and orchestration platforms such as Kubernetes. • Monitor environments, logs, and alerts; assist with troubleshooting and incident response. • Document configurations, processes, and security controls to support audits and compliance requirements. • Collaborate with development, operations, and security teams in an Agile/Scrum environment. • Learn and apply federal security frameworks such as NIST, FISMA, and FedRAMP.

• Architect, implement, and maintain scalable deployment infrastructure and CI/CD pipelines that support continuous delivery. • Drive platform modernization by automating workflows, integrating AI-assisted DevOps tools, and optimizing infrastructure as code with Terraform. • Lead incident response, performance tuning, and capacity planning to ensure the availability and reliability of critical SaaS applications. • Proactively diagnose and resolve complex issues across distributed systems, with a focus on service dependencies, observability, and log analysis. • Partner with Software Engineering, QA, and Product teams to advance reliability, security, and the developer experience. • Champion best practices in security, networking, and cloud architecture to maintain robust and compliant application environments. • Organize and lead complex infrastructure projects from conception through completion, communicating progress, risks, and timelines to stakeholders. • Coordinate cross-functional response efforts and guide contributors when their expertise is needed to resolve complex issues.

• Build and operate AWS GovCloud and multi-account cloud foundations • Work with AWS Organizations, Control Tower, and account provisioning automation • Implement Service Control Policies (SCPs), landing zones, and cloud governance guardrails • Develop reusable Terraform modules and secure "paved-road" cloud patterns • Standardize VPC, IAM, prefix lists, and account-level controls • Build automation using Python, Go, Ruby, or similar languages • Support cloud compliance automation, FinOps reporting, and cost management • Partner with engineering teams to implement secure and compliant cloud architectures • Participate in production support, incident response, operational triage, and cost anomaly response • Create documentation, runbooks, design notes, and audit-friendly operational records • Mentor engineers on secure cloud adoption and best practices