Senior DevSecOps Platform Engineer
Accenture Federal Services
$129,800 - $194,300 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
We’re building and operating the cloud platform that runs on AWS with Kubernetes (EKS), a fully GitOps deployment model, and infrastructure defined entirely as code. We’re a FISMA-Moderate environment actively maturing toward a multi-account federal landing zone, so this role sits right at the intersection of platform engineering, security, and compliance — where the interesting problems are. You’ll be a senior hand on a small, high-trust team. We move real infrastructure through code and pipelines, not tickets and click-ops, and we hold each other to that standard. If you like owning the whole path from a Terraform plan to a running, verified, signed workload and doing it in a way that stands up to an ATO review then this is the job for you.
Job Responsibilities:
- Own Terraform for a multi-environment, multi-account AWS estate - modules, state, and the safe reconciliation of live infrastructure into code
- Operate Amazon EKS clusters (not just consume them): networking, autoscaling, add-ons, workload identity, and cluster lifecycle
- Run and extend our GitOps delivery model (ArgoCD) where a merge is a deployment, so the review gate and the verification loop matter
- Build and harden CI/CD pipelines in GitLab: security scanning, secrets detection, policy-as-code, container image scanning and signing, and the evidence trail behind them
- Advance our security and compliance posture against NIST 800-53 - least-privilege IAM, network isolation, continuous monitoring, and the artifacts that support an Authority to Operate
- Help design the migration to a federal multi-account landing zone: identity, cross-account networking, and promotion between environments
- Mentor mid and junior engineers, and raise the bar on change control, review discipline, and “prove it with evidence” engineering
Here's What You Need:
- 7+ years in infrastructure / platform / DevOps, with senior ownership of production systems
- Deep, hands-on Terraform — you’ve written reusable modules, managed remote state, and untangled drift between code and live infrastructure without breaking things
- Strong AWS depth: VPC and networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager
- Kubernetes / EKS operated at production scale — workload identity (Pod Identity / IRSA), Helm, autoscaling, ingress and load balancing
- GitOps experience (ArgoCD or Flux) and CI/CD pipeline engineering (GitLab CI strongly preferred)
- DevSecOps in practice: security scanning (SAST, container, IaC, secrets), policy-as-code (OPA / conftest), and the discipline to make gates actually gate
Would Be Nice To Have:
- Multi-account AWS landing zone / Control Tower / Organizations design experience
- Working knowledge of a federal compliance framework — FISMA / NIST 800-53 / RMF and what it takes to support an ATO
- Container supply-chain security: SBOMs, image signing (Notation / AWS Signer), admission control
- Observability with CloudWatch and/or Grafana
- FedRAMP or GovCloud exposure
- Weather, geospatial, or scientific-data domain background
As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.
About this role
Accenture Federal Services is seeking a Senior DevSecOps Platform Engineer to own the infrastructure and security posture of a cloud platform running on AWS with Kubernetes, serving federal government clients. You'd join a small, high-trust team operating a FISMA-Moderate environment built on Terraform, EKS, and GitOps (ArgoCD), where infrastructure moves through code and pipelines rather than manual processes. The role spans the full stack: designing and maintaining multi-account AWS infrastructure, hardening CI/CD pipelines in GitLab with security scanning and policy-as-code, operating production Kubernetes clusters, and advancing compliance against NIST 800-53 standards in preparation for a federal landing zone migration.
This position demands 7+ years of hands-on infrastructure or platform engineering with deep expertise in Terraform, AWS (particularly VPC, IAM, EKS, and networking), and production Kubernetes operations. You'll need proven experience with GitOps tooling, CI/CD pipeline engineering, and DevSecOps practices including security scanning and policy-as-code. Familiarity with federal compliance frameworks—FISMA, NIST 800-53, or the RMF process—is essential, as is the discipline to make security gates meaningful rather than performative.
The role suits someone who enjoys owning infrastructure end-to-end, from code review through verified deployment, and who thrives in environments where compliance and security are built into the platform rather than bolted on afterward. You'd also mentor mid and junior engineers and help shape the team's standards around change control and evidence-based engineering. The position is fully remote and offers a salary range of $129,800–$194,300.
How this employer is doing
average
- News: Growing or Expanding
This role's local market on JobMinglr
Pay for this role
$129,800 to $194,300 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.