> Markdown version of [/jobs/ext/1935269-software-engineer](https://www.wearedevelopers.com/jobs/ext/1935269-software-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Engineer - **Company:** Tampa Brass & Aluminum Corp - **Location:** Tampa, FL, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Private Networks, Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Continuous Integration, Relational Databases, Linux, File Server, Github, Virtual Private Networks (VPN), Python (Programming Language), PostgreSQL, Linux System Administration, Linux Servers, Remote Access Technology, Shell Script, Software Engineering, Systems Integration, Technical Data Management Systems, Virtual Local Area Networks, Data Logging, Gitlab, Git, Fastapi, Containerization, Kubernetes, Restful APIs, Software Version Control, Docker, Jenkins - **Published:** August 5, 2026 - **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2909234778-2 ## About the Role Required * 5+ years of professional software engineering experience * Strong Python skills; comfortable building and maintaining REST APIs (FastAPI or equivalent) * Solid containerization experience (Docker); comfortable operating in a Windows/WSL2 Docker Desktop environment as well as native Linux * Hands-on Kubernetes experience (K3s, RKE2, or similar lightweight distribution) * Linux server administration experience * Git fluency; experience with self-hosted Git (Gitea, GitLab, or similar) * Relational database experience (Postgres preferred), including schema and access-role design * Comfortable working independently, documenting decisions, and pausing for approval before architectural or source-code changes * U.S. Person status, as required for access to ITAR-controlled technical data * Ability to pass a background check and meet screening requirements for access to NIST SP 800-171 r2-scoped systems Preferred * Experience with GitOps deployment tooling (ArgoCD or similar) and container registries (Harbor or similar) * Experience integrating with manufacturing ERP systems (E2 or similar) or PLM systems * Familiarity with NIST SP 800-171 r2 or other regulated/compliance-driven environments * Experience building tooling or APIs consumed by AI agents (context retrieval, RAG, knowledge-base-backed services) * CI/CD pipeline design experience (Gitea Actions, Jenkins, GitHub Actions, or similar) ## Description TBA is hiring a Senior Software Engineer to build and maintain the internal software and infrastructure that supports manufacturing operations, system integrations, and AI-assisted internal tooling. This role owns application development and Linux/Windows-based infrastructure work end to end, operating inside a security-conscious, compliance-bound environment. You will work closely with the IT/compliance lead to keep systems running, documented, and aligned with NIST SP 800-171 r2 requirements. This is a hands-on individual contributor role, not a people-management position. You will be trusted to make implementation-level decisions independently and to pause for approval before architectural changes or anything touching production source code., Application Development * Design, build, and maintain internal REST APIs (Python/FastAPI or similar) that serve internal tools and AI agents * Develop and maintain containerized services with clear separation of concerns per application * Convert existing shell-script-based tooling into maintainable, tested application code Infrastructure & Deployment * Administer the internal Linux server and lead rollout of a Kubernetes-based deployment platform (K3s or RKE2) to host containerized internal services * Stand up and maintain supporting cluster infrastructure: container registry (e.g., Harbor), GitOps-based deployment (e.g., ArgoCD), and cluster-level monitoring/logging * Maintain the shared Postgres layer, including per-app schemas and role-based access * Ensure all services survive host and node restarts and remain continuously LAN-accessible; verify restart resilience before considering any deployment complete Source Control & CI/CD * Manage repositories in Gitea (), including repo organization and branching conventions * Build and maintain CI/CD pipelines for automated build, test, and deployment * Follow phased delivery: later infrastructure phases (e.g., K3s, containerization) do not begin until prior phases are complete and explicitly approved Systems Integration * Integrate and maintain data flow between the ERP system (E2), Paperless Parts, the file server, and custom internal applications * Respect system boundary and scope requirements for CUI-handling systems; never introduce integrations that expand CUI scope without sign-off Compliance Support * Operate within a NIST SP 800-171 r2-scoped environment * Support documentation of system configurations relevant to the SSP as requested * Coordinate with the MSSP and internal network/IT staff on VLAN-segmented network changes affecting in-scope systems, * Specific: Complete Phase 1 of the Linux server project (Git repo organization and Obsidian vault sync pipeline) and begin Phase 2 (K3s cluster setup, containerized FastAPI service conversion) * Measurable: Phase 1 deliverables reviewed and approved; Phase 2 services deployed with verified restart resilience and LAN accessibility * Achievable: Using existing Docker/Postgres patterns and phased-gating approach already in place * Relevant: Reduces manual script maintenance and establishes a repeatable deployment pattern for future internal services * Time-bound: Phase 1 complete within 45 days of start; Phase 2 underway within 90 days Compliance-Aligned Systems Support * Specific: Support resolution of open SSP-related technical items (system boundary documentation, ERP/Paperless Parts integration details) ahead of the NIST SP 800-171 r2 assessment * Measurable: Assigned open items closed or documented with clear status ahead of the assessment window * Achievable: Working directly with the IT/compliance lead and MSSP as needed * Relevant: Directly supports readiness for the September 2026 third-party assessment * Time-bound: Ongoing through assessment date, with milestone check-ins monthly ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Countries for Software Engineers](https://www.wearedevelopers.com/magazine/267-best-countries-for-software-engineers) - [Is Software Engineering Hard?](https://www.wearedevelopers.com/magazine/448-is-software-engineering-hard)