DevOps Engineer

On-Site Bethesda, MD | Permanent Placement | 130-150k Base Salary

Required Skills & Experience

• 5-8 years preferred

• Multi-cloud Kubernetes exp (AKS/GKE)

o Someone with a CKA

• CI/CD (Jenkins, GitHub Actions)

o If someone is a rockstar but has experience with another CICD they might do it but someone that has built pipelines and several of them

• Backstage exp

• Argo Workflow – plus

• Distributed data ops: Kafka, CockroachDB, Couchbase, Elasticsearch—tuning, backup/restore, DR

• Observability: Prometheus, Grafana, Tempo

• Platform dev: Go, Node.js, C#/.NET

Job Description

• Own multi-cloud Kubernetes platforms on Azure AKS and Google Cloud GKE—design cluster topology, networking, RBAC, and policies for secure, scalable, cost-efficient operation.

• Build and evolve the Internal Developer Platform with Backstage—service catalog, golden-path templates, scorecards, and self-service scaffolding to standardize app onboarding.

• Engineer CI/CD at scale using Jenkins and GitHub Actions—pipelines-as-code, environment promotion, secrets management, and artifact provenance.

• Orchestrate batch/data workflows with Argo Workflows (not CI/CD)—multi-tenant DAGs, resource quotas, artifact/versioning strategy, and guardrails.

• Operate and tune stateful services—Kafka, CockroachDB (Postgres), Couchbase, Elasticsearch—including capacity planning, replication, backup/restore, and DR.

• Establish end-to-end observability—Prometheus metrics, Grafana dashboards, Grafana Tempo tracing, SLOs/error budgets, actionable alerting, and on-call runbooks.

• Build platform tooling & automation in Go, Node.js, and C#/.NET—CLIs, controllers/operators, APIs, and integrations that improve developer experience.

• Drive security, compliance, and reliability practices—image/signing & SBOMs, secrets management, network policies, least privilege, cost monitoring, incident response, and postmortems.