Software Engineer
Posted 17 Sep 2025
Advertised as “Software Engineer - CI/CD (TS/SCI Clearance Required)”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 2–10 yrs
- Management level
- Individual contributor
No salary listed for this role.
Responsibilities:
Design, build, and operate CI/CD pipelines for containerized workloads across dev/test/prod, and implement core Kubernetes platform capabilities (RBAC, networking, ingress, secrets, autoscaling, and upgrades). Package and deploy services with Helm/Kustomize using repeatable release strategies, automate environments with IaC, and embed DevSecOps controls and GitOps standards. Improve operability with strong observability and incident practices, partner with application teams to onboard and troubleshoot, harden the software supply chain and artifact flow, and document platform patterns and templates to scale adoption.
Required Qualifications:
- TS/SCI Clearance
- BS in Software Engineering or related field
- 2-10 years of experience in CI/CD and Kubernetes-focused engineering or SRE/Platform Engineering
- Strong Kubernetes skills: core objects, scheduling, RBAC, networking, storage, upgrades, troubleshooting
- Hands-on experience building CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions, Azure DevOps, or similar)
- Experience with Helm and at least one IaC tool (Terraform preferred)
- Experience operating container platforms (Docker/OCI), registries, and image lifecycle management
- Proficiency with Linux and scripting (Bash and/or Python); comfort debugging distributed systems
- Experience implementing security controls in pipelines (scanning, secrets handling, least privilege, policy)
- Familiarity with observability tooling (Prometheus/Grafana, ELK/OpenSearch, Loki, Splunk, Datadog, etc.)
Preferred Qualifications:
-
Experience with NGA CORE (Common Operations Release Environment) - a DevSecOps environment with an integrated CI/CD pipeline and a Kubernetes-based PaaS.
-
Experience supporting Kubernetes deployment and container orchestration across multiple security domains / networks in government or IC environments
-
Hands-on GitOps operations (Argo CD/Flux), including multi-tenant cluster patterns
-
Experience with policy-as-code (OPA/Gatekeeper, Kyverno) and admission control guardrails
-
Experience with service mesh (Istio/Linkerd) and zero-trust-friendly network segmentation
-
Experience building reusable platform “golden paths” (pipeline templates, Helm charts, scaffolding)
-
Strong background in platform hardening - supply chain security, artifact signing, provenance, SBOM workflows