SOSi

DevOps Engineer

• Create and maintain environment-specific Kubernetes configuration packages (e.g., Helm values files, YAML manifests) that incorporate STIG-aligned hardening and RBAC policy enforcement per IL environment.
• Implement and manage secrets injection strategies using FedRAMP-compliant tools (e.g., AWS Secrets Manager, Azure Key Vault), ensuring compatibility with automated deployment pipelines.
• Integrate CI/CD pipelines to enable secure, automated deployment and rollback of ArcGIS components and related services, supporting ongoing agility and compliance across environments.
• Coordinate with Kubernetes and Data Layer Engineers to ensure version control, pipeline integrity, and integration testing for all containerized services deployed under WO-003.
• Coordinate with the WO-009 infrastructure team to provide estimated cloud resource usage profiles for Kubernetes-based deployments in IL2, IL4, and IL5 environments.
• Supply container and workload specifications to the WO-009 infrastructure team to support provisioning, tagging, and prepay or reservation planning Implement resource tagging in alignment with program-wide cloud governance policy and reconcile actual usage against estimates provided by WO-009.
• Support cost optimization efforts led by WO-009 by adjusting workloads and scaling strategies in response to performance and utilization feedback.

Backend Engineer

• Configure, deploy, and maintain Kubernetes clusters tailored for each IL environment (IL2, IL4, IL5), ensuring support for ESRI ArcGIS services and integration with agency-provided infrastructure from WO-001.
• Develop and manage Helm charts and Kubernetes Operators for declarative deployment and automated scaling of ESRI services, including Notebook Server and GeoAnalytics Server.
• Configure persistent volume claims and provision container-native storage (e.g., AWS EBS, Azure Disks) to support ESRI workloads, ensuring durability and compliance with backup and recovery policies.
• Integrate Kubernetes-native monitoring and logging solutions (e.g., Prometheus, Fluentd, or OpenTelemetry) to support observability and IL-compliant reporting across environments.

Kubernetes Engineer

Cloud Engineer

• Design, deploy, and maintain secure cloud environments in AWS and Azure, ensuring compliance with DoD cloud security frameworks and best practices.
• Configure identity and access management (IAM) solutions, enforce role-based access controls (RBAC), and manage cloud security groups and firewalls.
• Optimize cloud networking configurations, including VPC peering, VPNs, and cross-domain connectivity to ensure secure and efficient cloud operations.
• Support the development of Infrastructure-as-Code (IaC) solutions using Terraform, CloudFormation, or ARM templates to automate secure cloud deployments.
• Contribute to the Cloud Security & Performance Optimization Report, detailing cloud security configurations, resource utilization efficiencies, and compliance measures.
• Track and report Kubernetes and other workload-specific cloud resource usage by Work Order, using GovCloud-native observability tools (e.g., Azure Monitor, AWS CloudWatch, Cost Explorer).
• Coordinate with other Work Order contractors (e.g., WO-003) to reconcile prepay or reservation usage against actual consumption and provide monthly reports on compute and storage allocation, tagging compliance, and projected costs.
• Advise the Government on workload placement and optimization strategies across IL2, IL4, and IL5 environments to reduce cost while maintaining performance and security compliance.
• Provision and maintain IL2, IL4, and IL5 GovCloud infrastructure using native Azure and/or AWS tools where feasible.
• Implement cloud-native services for monitoring (e.g., CloudWatch, Azure Monitor), cost tracking, and compliance automation to support scalability, security, and chargeback alignment.
• Provision infrastructure in coordination with other Work Orders.
• Provision and manage shared container environments and storage for dependent Work Orders, ensuring secure, efficient resource allocation and cross-Work Order operability.

Data Scientist

• Establish and maintain metadata governance frameworks, ensuring compliance with DoD data management policies and interoperability with Data Catalog.
• Develop automated metadata tagging processes to improve data discoverability, classification, and lineage tracking within the Common Intelligence Picture (CIP) platform.
• Implement and manage data governance workflows, ensuring integration with OpenLineage, Unity Catalog, and GIS metadata standards.
• Submit the Metadata & Data Governance Compliance Report, detailing lineage tracking, classification policies, and security enhancements.

DevOps Engineer

Kubernetes Engineer

Cloud Engineer

Data Governance, Metadata Scientist