> Markdown version of [/jobs/ext/2661236-infrastructure-architecture-platform-engineering](https://www.wearedevelopers.com/jobs/ext/2661236-infrastructure-architecture-platform-engineering). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Infrastructure Architecture & Platform Engineering - **Company:** Tangram, Inc. - **Location:** Dayton, OH, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Software Applications, Automation of Tests, Bash Shell, Cloud Foundry, Code Review, Cyber Security, Computer Engineering, Linux, DevOps, Disaster Recovery, Identity and Access Management, Python (Programming Language), NIPRNet, OpenID, Reliability Engineering, Prometheus, Security Assertion Markup Language (SAML), Secure Coding, Software Deployment, Software Engineering, SonarQube, Tripwire, Backup and Restore, Scripting, Cloud Platform System, Okta, Delivery Pipeline, Grafana, IT Architecture, Caching, Gitlab-ci, Kubernetes, Information Technology, Terraform, Data Pipelines, Devsecops, Docker, Static Application Security Testing, Golang, Dynamic Application Security Testing - **Published:** August 31, 2026 - **Apply:** https://www.dice.com/job-detail/b97455f7-3cec-4cee-92d5-2c4bf04df5f5 ## About the Role Tangram Flex is seeking a Senior DevSecOps / Platform Engineer with 5+ years of experience to lead and advance our cloud-native platform infrastructure, secure software delivery pipelines, and DevSecOps strategy. In this role, you will architect, optimize, and scale cloud-native application build environments and CI/CD pipelines supporting critical internal products and customer deployments across unclassified and classified domains., * Education: Bachelor's degree in Computer Science, Computer Engineering, IT, Cybersecurity, or equivalent practical experience. * Experience: 5+ years of hands-on experience in software deployment, cloud platform engineering, DevOps, or DevSecOps role in an enterprise or DoW environment. * Clearance: U.S. Citizenship required; must possess an active Secret security clearance, or possess the ability to obtain and maintain a U.S. Government Top Secret/SCI Security Clearance. * Core Technical Capabilities: Expert-level proficiency with AWS / AWS GovCloud, Kubernetes architecture, Docker/container runtimes, and Linux enterprise administration/scripting (Bash, Python, Go). * Advanced experience designing enterprise-grade GitLab CI/CD pipelines and infrastructure orchestration with Terraform. * DoD 8570/8140 Compliance: Active IAT Level II or IAM Level II/III certification (e.g., Security+ CE, CySA+, CISSP, CISM) * Willingness and ability to travel up to 20% to client sites, customer locations, and industry conferences as required., * Deep expertise in container security scanning and governance tools (e.g., Anchore, Trivy, SonarQube, NeuVector, Sysdig). * Strong experience with central authentication and identity providers (Okta, Keycloak, OIDC/SAML). * Proven experience mentoring mid-level and junior engineers on cloud-native practices, secure coding guidelines, and operational excellence. * Strong technical writing ability to author architectural blueprints, compliance documentation, and standard operating procedures (SOPs). * Excellent communication skills with the ability to bridge technical requirements between software development teams, product managers, and government stakeholders. * Flexibility to support high-priority operational deployment windows or mission-critical outage resolutions. * Direct hands-on experience with Air Force Platform One, Big Bang architecture, Iron Bank hardened container baselines, and AWS C2S/SC2S cloud environments. * Proven track record assisting or leading cATO accreditation efforts for defense or intelligence customer software applications. ## Description As a Senior Engineer, you will serve as a technical anchor-mentoring engineers, driving platform architecture decisions, and collaborating closely with cross-functional software teams to accelerate Continuous Authority to Operate (cATO) processes and integrate robust, shift-left security practices., Pipeline Architecture, Leadership & Software Delivery * Lead the architecture, design, and continuous optimization of enterprise CI/CD pipelines using GitLab CI or alternative deployment platforms. * Architect and mature GitOps workflows using FluxCD or ArgoCD to manage multi-cluster state across complex environments. * Establish automated testing, automated vulnerability gates, caching strategies, and performance benchmarks to dramatically shorten build and release cycles. * Provide tier-3 escalation support and root-cause analysis for build, deployment, or automation pipeline failures. * Drive technical standards, best practices, and code reviews across DevOps/DevSecOps practices within the engineering organization. Infrastructure Architecture & Platform Engineering * Architect, deploy, and maintain secure, highly available Cloud-Native infrastructure using AWS GovCloud and Kubernetes. * Design scalable Infrastructure-as-Code (IaC) frameworks (e.g., Terraform, OpenTofu) for automated provisioning of cloud, on-premises, and air-gapped environments. * Establish containerization standards, custom Helm chart templates, and orchestration patterns across multi-tenant Kubernetes clusters. * Lead deployment architectures and secure baseline configurations across multiple security enclaves (NIPRNet, SIPRNet, JWICS, C2S/SC2S). Continuous Security, cATO & Compliance Strategy * Architect end-to-end "Shift-Left" security controls into the delivery workflow, including automated SAST/DAST, container scanning, software bill of materials (SBOM) generation, and dependency tracking. * Lead compliance-as-code initiatives to enforce DoD Cybersecurity directives, STIGs, and NIST SP 800-53 controls to accelerate cATO approval frameworks. * Champion the integration and adoption of DoD Enterprise DevSecOps reference architectures (e.g., Platform One, Big Bang) and hardened container pipelines using Iron Bank. Observability, Site Reliability & Platform Operations * Architect enterprise observability and telemetry stacks (Prometheus, Grafana, Loki, Jaeger) to enable proactive system health monitoring, alert automation, and operational insights. * Lead disaster recovery, high-availability, and business continuity strategy, including automated backup and restore procedures for core Kubernetes clusters and stateful services. * Evaluate, pilot, and introduce emerging cloud-native and DevSecOps technologies to elevate overall team capabilities and platform efficiency. ## Related Videos - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [Retooling and refactoring - an investment in people.](https://www.wearedevelopers.com/videos/371-retooling-and-refactoring-an-investment-in-people) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Scoring 2000 Products per Request: Performance Pitfalls in Golang](https://www.wearedevelopers.com/videos/2073-scoring-2000-products-per-request-performance-pitfalls-in-golang) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)