Cleared DevOps Engineer - AWS
About The Position
Bestgate Engineering is actively looking for a cleared DevOps Engineer to own and evolve a mission-critical, logically isolated classified development environment in the AWS Secret Cloud region. This role sits at the center of secure software delivery. You'll design cloud infrastructure with AWS CDK (TypeScript), keep services healthy and patched, streamline delivery through GitLab, and ensure engineers have the tooling and lab connectivity they need without compromising security. If you like solving hard infrastructure problems, tightening automation loops, and making environments boringly reliable in a high-stakes setting, this is the job.
Requirements
- 7+ years in DevOps / Systems Engineering / Infrastructure Engineering roles.
- Strong hands-on experience building and maintaining AWS environments using AWS CDK (TypeScript) and automation scripting.
- Proven ability to operate secure, segmented environments with disciplined configuration management.
- Strong Linux + Windows operational experience:
- Proficient with Linux CLI, shell scripting and troubleshooting
- Windows administration experience (and the ability to integrate Windows-centric needs into automated workflows)
- Experience with GitLab administration (access management, CI/CD pipelines, runners, repo governance).
- Practical familiarity with PowerShell scripting, database administration, and client/server application support.
- Bachelor's degree in Computer Science, Information Technology, or a closely related field is preferred. In lieu of a degree, a minimum of 4 years of relevant work experience in engineering will be considered.
- Required Security Clearance: TS/SCI
Responsibilities
- Engineer and operate AWS infrastructure using AWS CDK (TypeScript) plus scripting/automation to build repeatable, version-controlled environments.
- Design and maintain cloud networking architectures and services (routing, segmentation, access controls, connectivity patterns) appropriate for classified development.
- Run a logically isolated classified dev environment in the AWS Secret Cloud region, ensuring secure boundaries and operational stability.
- Monitor system health and reliability: logging/metrics, alerting, capacity awareness, and fast incident triage.
- Perform routine patching and updates across hosted services.
- Administer GitLab end-to-end: user access controls, repository governance, CI/CD pipelines, runners, and source control workflows.
- Manage engineering SaaS toolchains (including licensing and updates) for tools like SolidWorks, Altium, Cameo, and ANSYS HPC.
- Support physical lab enablement: connectivity, network switch configuration, KVM architecture, and developer workstations (Linux/Windows).
Benefits
- Competitive Pay – Less frill for more in your base pay.
- Flexible PTO to fit your work/life needs + 11 holidays.
- 7% 401k Employer Gift – Vested immediately.
- 100% Paid Carefirst medical premiums for both individuals and families.
- Training/Career Pathing – Annual budget for training, mentoring, and an Internal Mobility Program.
- Morale Building Events – Time given to enjoy connecting with other Bestgate Employees.
- External Referral Program - If now's not the right time, but you know someone that is looking for a change, we offer competitive external referral bonuses for every hire!
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
