DevSecOps Platform Engineer

Senior DevSecOps Platform Engineer

Location: Hybrid – St. Louis, MO (3 days onsite, preferably Wednesday–Friday)

US Citizen or Green Card Candidates Only

Type: Contract-to-hire (conversion is the goal)

About the Role

Our client, a large St. Louis-area enterprise, is adding a Senior DevSecOps Platform Engineer to the team that owns its enterprise DevSecOps toolchain, supporting the full software development lifecycle for 300+ developers. This is a dual-mandate role. You will get productive quickly on the existing self-hosted toolchain on AWS EKS and carry real operational load, then help drive the consolidation and migration to a SaaS-based toolchain (GitHub Enterprise Cloud, GitHub Actions, and Atlassian Cloud) planned to begin later this year.

Must-Haves

• AWS cloud
• Terraform
• Python scripting

Current Environment: GitHub Enterprise Server, CloudBees CI (Jenkins) on EKS, JFrog Artifactory & Xray, SonarQube, Jira/Confluence Data Center on EKS; AWS (EKS, EC2, ECS, VPC, IAM, S3, Route 53, KMS, EFS, RDS); Terraform; Helm; Docker; Prometheus/Grafana; Azure AD/SSO

Target Environment: GitHub Enterprise Cloud (EMU) with Azure AD federation and SCIM; GitHub Actions replacing CloudBees CI; Actions Runner Controller (ARC) self-hosted runners on EKS; repository migration at scale via GitHub Enterprise Importer; consolidated code security scanning; Atlassian Cloud

What You’ll Do

Operate and support the current platform

• Provide ongoing production and operational support to internal teams; resolve incidents, tickets, and operational requests
• Administer CloudBees CI on EKS and GitHub Enterprise Server – lifecycle, upgrades, access governance, patching, and build troubleshooting
• Operate Artifactory, Xray, and SonarQube and support their integrations
• Maintain and extend Terraform infrastructure code through PR-based pipeline workflows
• Manage Kubernetes workloads on EKS – Helm releases, storage, scaling, and troubleshooting
• Resolve production issues across compute, storage, networking, identity, and certificate layers
• Drive vulnerability remediation and patch cadence; write runbooks and documentation
• Onboard new teams to platform standards and help them adopt CI/CD pipelines, GitHub, and related tooling
• Partner with Application Security and Cybersecurity to keep security policies, standards, and compliance requirements in place

Drive consolidation and migration

• Build and operate ARC self-hosted runners on EKS, including hardening and private VPC connectivity
• Convert Jenkins shared-library pipelines to GitHub Actions reusable workflows
• Plan and execute phased repository migration waves with validation and rollback
• Configure enterprise identity, SSO/SCIM, and access governance in the target platform
• Support developer onboarding and enablement; contribute to decommissioning plans

Required Qualifications

• Bachelor’s degree
• 7+ years in DevOps, DevSecOps, or platform engineering
• Hands-on administration of an enterprise CI platform (Jenkins/CloudBees preferred) and pipeline development using shared/reusable libraries
• Practical GitHub Actions experience – workflows, reusable workflows, runners, secrets
• Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes
• Terraform at production scale – modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker
• Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates
• Core systems fundamentals: Linux administration; networking (TCP/IP, DNS, routing, firewalls, load balancing, proxies, VPN/Transit Gateway, packet-level diagnostics); certificates and TLS (PKI, issuance/renewal, truststores, mTLS); identity (LDAP, Azure AD, SAML/OIDC, SSO, SCIM, RBAC)
• Scripting in Python, Bash, and Groovy
• Works independently with broad ownership, documents well, and participates in an on-call rotation

Preferred Qualifications

• GHES → GitHub Enterprise Cloud/EMU migration or Jenkins → GitHub Actions conversion at enterprise scale
• GitHub Enterprise Importer (GEI) and Actions Runner Controller (ARC) production experience
• Artifactory/Xray, SonarQube, or Atlassian Cloud migration experience
• AWS certification (DevOps Engineer – Professional or Solutions Architect)
• Code quality tool experience
• Experience in a regulated enterprise with formal change management