Senior DevOps & Platform Engineer

Bowhead is seeking a highly skilled Senior DevSecOps & Platform Engineer to support the Naval Surface Warfare Center Dahlgren Division (NSWCDD) Research, Development, Test & Evaluation (RDT&E) environment. The successful candidate will possess a diverse technical background encompassing DevSecOps architecture, platform engineering, full-stack application development, cybersecurity compliance, and emerging Artificial Intelligence/Machine Learning (AI/ML) technologies. This position requires a versatile technical professional capable of designing, developing, deploying, securing, and maintaining enterprise applications and infrastructure across complex computing environments. The individual will play a critical role in integrating modern development practices, automating infrastructure and deployment processes, ensuring compliance with Department of Defense (DoD) cybersecurity requirements, and supporting innovative AI-enabled capabilities. The ideal candidate will demonstrate strong technical proficiency, analytical problem-solving skills, and the ability to collaborate with government stakeholders, software developers, cybersecurity personnel, and infrastructure engineering teams.

• Design, implement, and maintain secure, scalable DevSecOps platforms supporting enterprise application development and deployment.
• Develop, manage, and optimize Continuous Integration/Continuous Deployment (CI/CD) pipelines using GitLab.
• Support containerized application environments utilizing Docker and Kubernetes.
• Administer and troubleshoot Linux and Windows operating environments.
• Support virtualized infrastructure utilizing VMware vSphere.
• Integrate artifact repositories, development tools, and collaborative platforms, including Artifactory, Jira, and Confluence.
• Identify opportunities to automate infrastructure management, application deployments, and operational workflows.

• Develop, maintain, and enhance software applications using Python and JavaScript.
• Support application integration across multiple platforms, databases, and enterprise systems.
• Develop and maintain database connectivity and application functionality utilizing Microsoft SQL Server, Oracle SQL, MySQL, and MariaDB.
• Collaborate with development teams to improve application performance, reliability, scalability, and security.
• Incorporate automated testing, code validation, and secure software development practices throughout the application lifecycle.
• Troubleshoot complex application, infrastructure, and integration issues.

• Integrate cybersecurity requirements and secure development practices throughout the software development lifecycle.
• Implement and validate Security Technical Implementation Guides (STIGs) across applicable systems and applications.
• Support vulnerability identification, assessment, tracking, and remediation using Assured Compliance Assessment Solution (ACAS), SCAP, McAfee security tools, and related technologies.
• Implement static code analysis and vulnerability scanning tools, including Xray, within development pipelines.
• Collaborate with cybersecurity professionals to address identified vulnerabilities and maintain compliance with applicable DoD security requirements.
• Support security assessments, audit preparation, remediation activities, and continuous monitoring efforts.
• Promote security automation and continuous compliance throughout the development and deployment process.

• Support the evaluation and integration of AI/ML technologies into enterprise development and operational environments.
• Develop and implement agentic workflows and AI-enabled automation capabilities.
• Work with Large Language Models (LLMs) and agentic harnesses to support intelligent workflow orchestration and process improvement.
• Evaluate opportunities to leverage AI technologies to enhance software development, troubleshooting, cybersecurity operations, and organizational efficiency.
• Collaborate with technical stakeholders to assess the feasibility, security, and operational value of emerging AI capabilities.

• Serve as a technical subject matter expert across DevSecOps, application development, platform engineering, and cybersecurity disciplines.
• Collaborate with government customers and multidisciplinary technical teams to identify requirements and develop effective solutions.
• Provide technical recommendations concerning system architecture, application deployment, security improvements, and infrastructure modernization.
• Develop and maintain technical documentation, standard operating procedures, and configuration records.
• Investigate and resolve complex technical challenges while maintaining customer communication and operational continuity.

• Demonstrated professional experience in DevSecOps engineering, platform engineering, software development, or closely related technical disciplines.
• Working knowledge of Linux and Windows operating systems.
• Experience with containerization and orchestration technologies, including Docker and Kubernetes.
• Experience supporting virtualized infrastructure using VMware vSphere.
• Hands-on experience developing and maintaining GitLab CI/CD pipelines.
• Familiarity with Artifactory, Jira, and Confluence.
• Programming experience using Python and JavaScript.
• Experience working with relational databases, including one or more of the following: Microsoft SQL Server, Oracle SQL, MySQL, or MariaDB.
• Understanding of cybersecurity principles, vulnerability management, and secure software development practices.
• Experience with cybersecurity compliance tools and processes, including STIGs, ACAS, SCAP, static code analysis, or comparable technologies.
• Strong troubleshooting and root-cause analysis capabilities across applications, infrastructure, and development environments.
• Ability to communicate technical information effectively to engineering teams, program leadership, and government stakeholders.
• Ability to work independently and collaboratively within a multidisciplinary technical environment.

• Experience designing and implementing enterprise DevSecOps architectures.
• Advanced Kubernetes administration, configuration, and troubleshooting experience.
• Experience integrating automated security scanning and vulnerability management into CI/CD pipelines.
• Familiarity with DoD cybersecurity compliance requirements and Risk Management Framework (RMF) processes.
• Experience supporting DoD RDT&E or similarly complex federal IT environments.
• Experience developing full-stack applications and integrating enterprise database systems.
• Knowledge of AI/ML technologies, Large Language Models, agentic harnesses, and agentic workflows.
• Experience implementing AI-enabled automation within secure enterprise environments.
• Experience supporting platform modernization, infrastructure automation, and continuous compliance initiatives.
• Relevant industry certifications in DevSecOps, cloud technologies, Kubernetes, software engineering, or cybersecurity.

• Demonstrates adaptability across multiple technical disciplines and rapidly evolving technologies.
• Possesses strong analytical skills and an innovative approach to problem-solving.
• Maintains a security-focused mindset throughout development and operational activities.
• Demonstrates initiative in identifying opportunities for automation and process improvement.
• Effectively balances software development, infrastructure operations, and cybersecurity requirements.
• Builds productive relationships with customers and technical stakeholders.
• Demonstrates attention to detail, accountability, and a commitment to mission success.

• Must be able to lift up to 25 pounds 
• Must be able to stand and walk for prolonged amounts of time
• Must be able to twist, bend and squat periodically

SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Top Secret/SCI level.  US Citizenship is a requirement for Top Secret/SCI clearance at this location.

#LI-JR1