> Markdown version of [/jobs/ext/511321-senior-devops-engineer](https://www.wearedevelopers.com/jobs/ext/511321-senior-devops-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior DevOps Engineer - **Company:** ARCHICOO SOLUTION INCORPORATED - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $113,152.0 - $200,000.0 - **Contract:** Temporary contract - **Skills:** User Authentication, Backup Devices, Software as a Service, Continuous Integration, DevOps, Lightweight Directory Access Protocols (LDAP), Performance Tuning, Security Assertion Markup Language (SAML), Software Engineering, Data Logging, System Availability, Delivery Pipeline, Gitlab, Kubernetes, Terraform, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** June 10, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=10861ebaef4b2e1f ## About the Role Do you have experience in Terraform?, GitLab self-managed administration. Direct, recent experience administering self-managed GitLab (not GitLab.com SaaS). You have personally handled upgrades, backups, high-availability configurations, runner management, and performance tuning. - CI/CD pipeline architecture. You design and maintain reusable pipeline templates and parent/child pipeline structures, and you've integrated pipelines with security scanners and artifact repositories. We use JFrog and Wiz; experience with these specifically is a plus. - GitLab Runner management at scale. You understand the trade-offs between shared, group, and project-scoped runners, and you've operated runners using the Kubernetes executor on EKS. - Authentication and access control. You've implemented and maintained SAML/SSO/LDAP integration and designed group and project permission models at enterprise scale. - Infrastructure-as-code fluency. You're fluent in Terraform, ideally including the GitLab provider, and you instinctively manage configuration as code rather than clicking through the UI. Strong Nice-to-Haves - GitLab Geo experience, including replication and disaster-recovery scenarios. - Container Registry and Package Registry administration. - Migration experience such as onboarding organizations into GitLab, or executing major version upgrades on self-managed instances. - Hands-on experience integrating GitLab with Kubernetes/EKS for runner workloads and deployment pipelines. - Federal or regulated-industry exposure: FedRAMP, IL5, NIST 800-53, and familiarity with the ATO process. ## Description We are looking for a senior engineer who owns our GitLab self-managed platform end to end, not someone who has merely used GitLab, but someone who has run it. You will be the technical authority on our self-hosted GitLab environment, responsible for its availability, performance, security posture, and the CI/CD experience of every engineering team that depends on it. This is a hands-on, deep-specialist role. We are deliberately not hiring a broad DevOps generalist who lists GitLab among ten other tools. We want someone who knows the product intimately, stays current with its fast-moving release cycle, and treats the platform as a product in its own right. You will work in a security-conscious, regulated environment, so we need someone who is comfortable making security a first-class concern in everything they build and who is willing to speak up when something isn't right. What You'll Own - The full lifecycle of our self-managed GitLab deployment: upgrades, backups, high availability, capacity planning, and performance tuning. - CI/CD pipeline architecture across the organization, including reusable pipeline templates, parent/child pipelines, and integrations with our security scanners and artifact repositories. - GitLab Runner fleet management at scale, including shared, group, and project-scoped runners running on a Kubernetes executor on EKS. - Authentication and access control across the platform - SSO/SAML/LDAP integration and enterprise-scale group and project permission models. - Managing platform configuration as code rather than through the UI, with Terraform as the source of truth., Security is not a separate workstream in this role - it's built into the platform you operate. You will: - Integrate and maintain security and vulnerability scanning (e.g., Wiz, SAST/DAST, dependency and container scanning) directly within CI/CD pipelines, and ensure findings are visible and actionable for engineering teams. - Harden the GitLab platform itself: enforce least-privilege access models, manage secrets and CI/CD variables securely, and keep the environment patched and current with security releases. - Implement and maintain supply-chain security controls, such as signed artifacts, trusted artifact repositories (JFrog), and policies that prevent untrusted dependencies from entering builds. - Support audit, logging, and compliance requirements, and help maintain the platform's posture against frameworks such as NIST 800-53 in support of FedRAMP/IL5 and ATO obligations. - Partner with security and compliance teams to translate control requirements into enforceable, automated platform configuration. Who You Are Vocal and comfortable speaking up. This is a genuine requirement, not a throwaway line. We need someone who will raise concerns early, flag risks before they become incidents, push back on shortcuts that compromise security or stability, and advocate for the right technical approach, even when it's not the easiest conversation in the room. Quiet competence isn't enough here; we need your voice. - A specialist at heart. You'd rather know one critical platform deeply than know ten tools superficially. - Current. You've worked on self-managed GitLab within the last couple of years and keep pace with how quickly the product evolves. - Pragmatic and security-minded, with a bias toward automation and codified, repeatable configuration over manual changes., To be clear about the bar for this role: we're looking for an administrator and platform owner, not an end user. Candidates whose GitLab experience amounts to having used it at a previous company are not a fit. Likewise, generalists who can name many tools but can't go deep on the operation of any of them won't be the right match. Because self-managed GitLab changes quickly, we're specifically looking for people who have administered it hands-on recently. ## Related Videos - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers) ## Related Articles - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [The Top 10 GitHub Alternatives (2025)](https://www.wearedevelopers.com/magazine/298-the-top-10-github-alternatives-2025) - [Stop Googling Git Commands. Start Actually Learning Git.](https://www.wearedevelopers.com/magazine/730-stop-googling-git-commands-start-actually-learning-git) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [DevOps Engineer Salary [2023]](https://www.wearedevelopers.com/magazine/203-devops-engineer-salary-2023)