Platform Engineer

Platform Engineer

Position Summary:

·         Keeps the automation platform honest: legacy Jenkins jobs that still matter, Ansible desired state for application components, and signed container images in AWS. Operating-system administration stays with Networking.

Responsibilities:

·         Stabilize legacy Jenkins jobs used in CI/CD. Add monitoring. Do not create new Jenkins jobs. Migrate jobs that still produce value into Azure DevOps pipelines and retire unused jobs through an alternatives analysis.

·         Maintain Ansible Tower playbooks for application-level desired state on Linux components. Support WSO2 patch testing around Networking’s monthly operating-system window. Do not administer the guest operating system or the virtual machine.

·         Own the AWS Elastic Container Service registry path: signed and scanned images only, promotion through environments, and no unregistered production containers.

·         Implement infrastructure-as-code and compliance-as-code so security and configuration baselines travel with the pipeline.

·         Apply the common pipeline pattern in Azure DevOps and, until retirement, in Jenkins. Include software composition analysis, static analysis, secrets scanning, and automated accessibility checks where a user interface is present.

·         Set Git and Azure Repos branch policies, reviewed merges, and signed commits where required.

·         Build and keep the operational dashboards the lead uses for pipeline health, and feed StatusCake and Splunk verification after production deploys.

·         Right-size non-production environments and flag idle spend for the monthly FinOps report. The architect and portfolio manager own the recommendation; this seat supplies the evidence.

·         Share quality engineering with the DevOps Lead. There is no separate test-team seat. A production deploy that fails scanning, tests, secrets checks, or required Section 508 checks does not ship.

·         Cross-train a backup on Jenkins, Ansible, and the registry.

Required qualifications:

·         At least 5 years of platform automation in production, with substantial Jenkins or Azure DevOps and Ansible or an equivalent desired-state tool.

·         AWS production experience, including container images and environment promotion. GovCloud experience is strongly aligned to this environment.

·         Infrastructure-as-code you can show, with a rollback story.

·         Discipline about the boundary with the operating-system owner: you test and configure the application platform; you do not patch the host.

·         Able to obtain a DOJ Public Trust at the tier required for the privileged access this seat uses.

Preferred qualifications

·         Ansible Tower, Jenkins on AWS, and an AWS container registry in the same environment.

·         A Jenkins-to-Azure-DevOps migration you personally executed.

·         Secrets scanning, image signing, and policy-as-code in the pipeline.

·         FinOps evidence: idle environment cleanup tied to a monthly cost report.

·         AWS, Azure DevOps, or GitHub certification, or equivalent depth.

Work location: Biweekly on-site visits to the US OJP headquarters (999 N. Capitol Street NE, Washington, DC).

Digital HIE is an information technology company focused on connecting Data, Modernizing digital platforms and Engineering secure solutions for public and private organizations.