By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&S) training solutions to the Federal Government and industry. Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains. CESI also designs, builds and runs infrastructure, platforms, applications and processes that enable cyber training for the integrated multi-domain force. Our vision is to become a worldwide full spectrum LVCG and cyber training/analysis developer, integrator and services provider.
Position OverviewWe are seeking a highly skilled Senior DevSecOps Engineer with a strong foundation in System Administration and deep expertise in Kubernetes orchestration. You will be responsible for container orchestration, managing large-scale Kubernetes deployments, and providing enterprise monitoring and deployment capabilities in support of a next generation collective training software system.
Must be able to work in the office in the Orlando area – this is an on-site position.
ResponsibilitiesKubernetes & Platform Engineering:
- Design, deploy, configure, and maintain high-availability Kubernetes clusters across hybrid or public cloud environments.
- Manage enterprise-grade Kubernetes distributions, specifically utilizing OpenShift or Rancher for cluster management, multi-tenancy, and security enforcement.
- Optimize container networking, storage providers, and ingress controllers.
System Administration & Infrastructure:
- Maintain, tune, and troubleshoot the underlying Linux (RHEL/Fedora Core) operating systems supporting our cluster infrastructure.
- Automate infrastructure provisioning and configuration management using Terraform, Ansible, or OpenShift/RKE2 operators.
- Diagnose complex, low-level system issues (DNS, kernel parameters, disk I/O, network latency).
Leadership:
- Serve as the technical lead and mentor for a team of DevSecOps engineers, conducting reviews and actively teaching and training to elevate the team's skills.
- Implement standards, create repeatable processes, and maintain documentation, ensuring complex technical knowledge is clearly documented and easily digestible.
- Bachelor’s degree in a technical discipline such as Computer Engineering, Computer Science, Electrical Engineering from an accredited college or university.
- Eight (8) years’ experience in DevOps, DevSecOps, or Systems Administration, with at least 3 years dedicated to managing production Kubernetes workloads.
- 2+ years of experience leading projects, mentoring junior technical staff, or operating as a tech lead. Must demonstrate strong presentation and communication skills.
- Strong background in Linux/Unix System Administration (core utilities, systemd, storage management, networking, and shell scripting in Bash or Python).
- Deep understanding of container runtimes (Docker, containerd, etc.) and the inner workings of Kubernetes components.
- Certifications: Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS), Red Hat Certified Specialist in OpenShift Administration, or equivalent cloud provider certifications (AWS, Azure, GCP).
- Please note that pursuant to a government contract, this specific position requires U. S. Citizenship status with ability to obtain a SECRET to TOP SECRET security clearance. Security Clearance requirements will be specified in the Government's Task Order.
CESI recognizes that our strength is our people. We support every employee as an individual to build strong teams across the enterprise. Our benefit package includes:
- Medical, Dental & Visio
- Coverage
- Wellness Program
- 401(k) Matching
- Disability (Short Term & Long Term)
- Employee Assistance Program
- Life Insurance
- Education & Training
- Generous Leave Policy (11 Federal Holidays, PTO, Military Leave, Bereavement and Jury Duty)
Cole Engineering Services, Inc. is an equal opportunity employer. We consider qualified applicants without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, political affiliation, age, marital status, disability, genetic information, veteran status, membership in an employee organization, or any other basis prohibited by federal, state, or local laws.
Skills Required
- Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, or another technical discipline
- Eight years of experience in DevOps, DevSecOps, or systems administration
- At least three years managing production Kubernetes workloads
- Two or more years leading projects, mentoring technical staff, or serving as a technical lead
- Strong Linux or Unix systems administration experience, including systemd, storage, networking, and shell scripting
- Experience with Bash or Python scripting
- Deep understanding of Docker, containerd, and Kubernetes components
- Strong presentation and communication skills
- U.S. citizenship
- Ability to obtain Secret through Top Secret security clearance
- Certified Kubernetes Administrator, Certified Kubernetes Security Specialist, Red Hat Certified Specialist in OpenShift Administration, or equivalent cloud certification
What We Do
By Light Professional IT Services LLC (By Light) provides a full range of hardware and software engineering services to defense, civilian, and commercial customers worldwide. Driven by a management team that leverages real-world expertise from the defense, intelligence, federal healthcare, and commercial sectors, we provide reliable, efficient, and cost-effective IT solutions. Some of our successes include: • Completion of 80+ Global Information Grid Bandwidth Expansion (GIG-BE) sites both CONUS & OCONUS. Provided Optical Network Engineering, Implementation, & Project Control Worldwide. • Provided timely completion of ATM to IP Migration, Legacy Network Optimization, & VOIP Implementation of 47 CONUS Sites for the United States Special Operations Command (USSOCOM) SCAMPI Network. • Supporting the AMC CIO/G6 in the Depot Modernization Program, implementing CONUS wide 802.11/a/b/g/n wireless networks, Area Processing Center Migration, DISN Optimization, and a 40,000 user, enterprise-wide SharePoint Implementation. • Completion of 2,000 Plus Legacy Circuit Migrations to DISN Transport for DISN Transition Program. • Delivered Communications Support & Staff Augmentation for Deployed DoD Forces under the Program Executive Office Enterprise Information Systems Technology Applications Office (PEO EIS TAO). • Successful Implementation of Secure Intelligent Video Systems (IVS) for the Intelligence Community. • Supporting major international carriers in the modernization and expansion of Data Center Facilities. • Engineering new Turnkey “Cloud Services,” including Hosting, Managed Services, COOP, and Data Storage and Archival.
.png)
