DevOps Engineer (Active TS/SCI)

Must have active TS/SCI clearance. Will consider TS for the right candidate.

Key Responsibilities:

• Design, develop, and maintain Flask-based REST APIs and backend services
• Implement secure data access layers and authentication/authorization (e.g., OAuth2/JWT)
• Build and improve CI/CD pipelines (automated builds, tests, deployments) with integrated security scanning
• Create and maintain automated tests (unit/integration/API) and maintain quality gates
• Containerize services (e.g., Docker) and support deployment/orchestration patterns as needed
• Use infrastructure-as-code (e.g., Terraform/Ansible) and configuration management best practices
• Integrate and act on security scanning (SAST/DAST/SCA); remediate findings and follow secure coding practices
• Implement secrets management using approved vault/secret managers; enforce least privilege
• Implement logging/metrics/monitoring; support alerting and dashboards
• Support incident response/on-call rotations, perform root-cause analysis, and contribute to postmortems
• Participate in Agile/Scrum ceremonies, code reviews, and engineering standards
• Produce and maintain documentation (API docs, designs, runbooks, compliance artifacts)

Basic Qualifications:

• 3–6 years of professional software engineering experience
• Strong proficiency in Python and Flask building secure RESTful APIs
• Solid understanding of security fundamentals (authN/authZ, OWASP Top 10 concepts, key/secret handling)
• Hands-on experience with Git, Linux, Docker, and CI/CD pipelines
• Proficiency with automated testing practices and frameworks
• Experience with databases and data modeling (SQL/ORM; e.g., PostgreSQL/MySQL)
• Familiarity with infrastructure-as-code and cloud services (AWS/Azure/GCP)
• Experience with logging/monitoring and operational best practices
• Strong communication skills and ability to collaborate with cross-functional teams
• Optional (if required by program): eligibility to obtain and maintain a U.S. government security clearance

Preferred Qualifications:

• Experience with Kubernetes/OpenShift
• Experience with Terraform/Ansible and secret managers (e.g., Vault or cloud-native equivalents)
• Familiarity with OAuth2/OIDC, SSO, and API gateway patterns
• Hands-on with SAST/DAST/SCA tooling and SBOM practices
• Performance tuning and scalability experience for Flask services

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status").