3 days ago
Reston, VA, USASenior
Base Salary
$99k - $168k/yr
Responsibilities
- Build and maintain automation that provisions, configures, secures, and releases cloud environments and customer workspaces.
- Develop infrastructure-as-code, CI/CD pipelines, secure configuration patterns, secrets integration, release automation, and deployment evidence.
- Provision and manage Azure resources and Databricks workspaces, catalogs, access controls, compute policies, notebooks, jobs, clusters, and governance controls.
- Integrate vulnerability scanning, static analysis, dependency analysis, container scanning, policy validation, compliance checking, and automated governance into delivery pipelines.
- Implement logging, monitoring, observability, deployment auditing, operational telemetry, rollback strategies, and release validation.
- Collaborate with architecture, security, platform engineering, SRE, QA, governance, product, engineering, and government stakeholders.
- Document work products, decisions, risks, and delivery evidence to support traceability and continuous improvement.
Requirements
- U.S. citizenship, residence in the U.S., authorization to work in the U.S., and at least three full years lived in the U.S. during the last five years are required.
- A bachelor's degree in a related field is required, or a high school diploma plus four additional years of relevant experience may substitute.
- At least six years of relevant experience is required; a master's degree may substitute for two years of relevant experience.
- Experience designing, implementing, and operating DevSecOps practices for large-scale cloud, data, analytics, or enterprise modernization platforms.
- Deep Terraform experience, including reusable modules, environment templating, policy enforcement, provisioning, state management, and enterprise deployments.
- Hands-on experience with Databricks, Azure Government, Azure Commercial, AWS GovCloud, hybrid cloud, CI/CD, GitHub Actions, Azure DevOps, and Git.
- Experience with Azure resources, Azure Key Vault or HashiCorp Vault, certificate management, key rotation, secure credentials, and identity and access management.
- Experience with Python, PowerShell, Bash, REST APIs, Microsoft Entra ID, RBAC, service principals, managed identities, and federated authentication.
- Experience supporting MLOps, DataOps, platform engineering, data engineering, analytics, reporting, AI/ML, and enterprise application workloads.
- Experience with Zero Trust, NIST 800-53, RMF, FedRAMP, FIPS, federal cybersecurity requirements, compliance validation, and secure cloud architectures.
- Experience with logging, monitoring, observability, operational telemetry, release evidence, deployment auditing, and operational readiness.
- Experience in federal government, healthcare, or other highly regulated environments is preferred.
- Experience with Agile, Scrum, SAFe, or cross-functional engineering teams is preferred, along with strong analytical, communication, organizational, and collaboration skills.
Benefits
- Remote position with a strong preference for candidates in the Washington, DC Metro Area and occasional onsite client meetings in Washington, DC.
- All work must be performed in the U.S.; ICF monitors work locations, blocks foreign access, and prohibits personal VPN connections.
- The position is contingent upon a contract award and interviews and offers are being conducted in anticipation of the award.
About ICF
ICF is a global consulting and technology services firm serving government and commercial clients across domains such as energy, health, climate, and digital modernization. It delivers advisory, program implementation, analytics, and software-enabled solutions on platforms like ServiceNow. Founded in 1969 and headquartered in Reston, Virginia, ICF is a public company traded on NASDAQ and works extensively with U.S. federal, state and local agencies as well as regulated industries.