Senior DevSecOps & Platform Engineering Lead

About this role

Senior DevSecOps & Platform Engineering Lead Full-Time W-2 | Fully Remote (U.S.) | Federal Civilian Practice | $180,000 to $210,000 The Problem We're Hiring You to Solve A 20-year-old federal platform sits behind a home loan benefit that millions of American families depend on. Your job is to help retire it without anyone noticing. You will own the DevSecOps and platform engineering ecosystem for a modernization program that runs legacy and modern stacks side by side: pipelines that move code from commit to production in under an hour, zero-downtime production deployments, environments built and torn down as code, and observability deep enough to explain a failure before the customer reports it. You will do this inside real federal security constraints, with real authority over how the engineering system works, and with AI as a first-class engineering tool. The Opportunity Most DevSecOps roles hand you an inherited pipeline and a backlog of tickets. This one hands you an engineering system to shape. The program spans multiple applications, technology stacks, and platforms: a legacy suite that must stay stable and secure until it is decommissioned, and a modern cloud platform (Salesforce-centered, supplemented by serverless capabilities in a government cloud) where new capability lands every month. Production runs 24/7 against contractual availability targets. Releases ship to production at least monthly. Critical vulnerabilities must close in 30 days. The monitoring bar is full business transaction visibility, not “the server is up.” You will lead the engineers who make all of that true. Not from a status meeting. From the architecture, the pipeline definitions, the incident bridge, and the customer conversation. You will decide how code moves from a developer's hands to production, how failures get detected and diagnosed, how security gets enforced without slowing delivery, and where automation and AI replace manual work. The outcomes are measured, visible, and attached to a mission that matters. When deployments get faster and incidents get rarer, the customer sees it, and so do the people the program serves. A note on the stack. If “Salesforce” made you hesitate, read this twice. You will not become a Salesforce administrator, and this role will not narrow your career. The application platform is Salesforce. The engineering system around it is not. The CI/CD architecture, environment automation, serverless cloud components, observability, security automation, legacy systems, and AI-enabled workflows are general-purpose platform engineering, and that is where you will spend your time. A strong platform engineer picks up the Salesforce-specific pieces quickly. The reverse is not true, which is why we are hiring for the former. What You'll Own The delivery platform. Design and run CI/CD that lets teams move code from commit to production across multiple applications, stacks, and environments with minimal manual intervention. The standard: builds, tests, and deployments complete in under an hour, and production releases ship monthly or faster. Zero-downtime release engineering. Build deployment automation that verifies a release in production before users touch it, and rolls back cleanly when verification fails. Boring deployments are the goal. Environments as code. Automate provisioning so a complete environment stands up or tears down in days, not months, and configuration drift stops being a source of incidents. Security engineered into the pipeline. Make quality and security gates automatic, surface vulnerabilities early instead of at audit time, and drive remediation inside federal 30/60/90-day windows for critical, high, and medium findings. Support multi-year authorizations to operate and the program's Zero Trust alignment as engineering work, not paperwork theater. Observability that explains itself. Build monitoring that covers infrastructure, applications, interfaces, batch jobs, and full business transactions, with a

Skills and categories