DevSecOps Engineer / Platform Engineer

Peregrine Advisors is a rapidly growing AI and data innovation hub helping government solve hard problems and deliver better outcomes. We work across the full lifecycle—from strategy and governance through architecture, engineering, analytics, AI, visualization, and training—for clients including the SEC, PCAOB, DDOT, and DCAA.

Our clients describe our support as “absolutely excellent” and our people as “instrumental to organization’s success.” Winner of the United Nations COP27 Datathon, our work has earned all Exceptional CPARS ratings, SEC Chair’s Awards, the SEC Vision Award, and recognition from FDA leadership.

As we enter our next stage of growth, we need dependable, motivated, and skilled people who have a combination of intellectual curiosity and intellectual courage. With new clients, larger programs, and expanding responsibilities, the people joining Peregrine now will have the opportunity to help shape the company we become.

We solve problems through people, process, and technology—in that order. Technology matters, but people make transformation happen. That principle defines our culture. Trust and motivation come before competence. We hire people we can trust, who care deeply about what they do, take ownership, learn quickly, help one another, and refuse to walk past a problem because it belongs to someone else.

At Peregrine, you are not joining simply to fill a position. You are joining a team, taking ownership of a mission, and helping build a company. If that excites you, we should talk.

At Peregrine Advisors, you will own the delivery pipelines, automation, and environments that carry federal systems into production. But we hire people, not seats. As the work evolves, you will learn new systems and tools, take on greater responsibility, and help develop the firm's capabilities, tools, and lines of business. We move our best to where the hardest problems are.

Your first project

Your first project will likely have you owning assigned delivery pipelines and the environments beneath them. Depending on the assignment, you may:

• Work on the integration and deployment of enterprise tools and platforms such as SageMaker, Posit Connect, or on-demand, pre-configured EC2-based Linux virtual machines.
• Build and maintain CI/CD pipelines for infrastructure validation, testing, deployment, and release promotion.
• Configure cloud networking, access permissions, storage, and compute resources following established security requirements.
• Build and maintain Linux machine images, including software installation, configuration, patching, and validation.
• Support analytics and development environments, including user onboarding, access configuration, and software dependencies.
• Troubleshoot deployment failures, connectivity problems, permissions, Linux services, and application runtime issues using logs and diagnostic tools.
• Write and maintain scripts that simplify recurring operational tasks and improve consistency.
• Participate in code reviews, test infrastructure changes, and document implementation details, troubleshooting procedures, and operational runbooks.
• Take ownership of assigned changes from implementation through deployment verification, collaborating with senior engineers on architectural decisions and complex incidents.

You deliver CloudFormation templates, Amazon Machine Images (AMIs), and pipelines that provide the required functionality through the enterprise tools and platforms, enforce the required controls, and produce the evidence a release review needs. You automate the manual steps out of the release path, and you build progressive delivery with automated health checks and rollback so that deploying stops being an event.

This is where you start, not the shape of your career here.

Requirements

• 5+ years of DevSecOps or platform engineering experience
• A bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline
• Hands-on experience administering Amazon Web Services (AWS) cloud infrastructure with a working understanding of compute, storage, networking, and identity management
• Practical experience with infrastructure as code (CloudFormation or the AWS Cloud Development Kit), CI/CD pipeline automation with security gates using GitHub Actions or comparable tools, and hands-on Docker image creation and containerization
• Linux administration and troubleshooting skills, including packages, services, permissions, and logs
• Ability to write and troubleshoot scripts in Python and Bash
• Understanding of least-privilege access, zero trust principles, secure configuration, and controlled deployment processes
• Experience with Git-based version control
• Monitoring and logging
• Proficiency in writing, PowerPoint, and Excel

Preferred

• Federal security experience supporting Federal Information Security Modernization Act (FISMA) compliance, implementing National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53) controls, and providing Authority to Operate (ATO) support
• Red Hat Enterprise Linux (RHEL) administration, Ansible, and software packaging experience
• An Amazon Web Services certification
• Nexus, Artifactory, CloudBolt, or comparable artifact management and provisioning platforms
• OpenID Connect (OIDC) authentication, deployment approval controls, and AWS environments spanning multiple accounts
• Federal information technology experience

Who you are

You build security and reliability into the work from the start because they cannot be afterthoughts in a federal environment. You automate what others do by hand and leave an audit trail. You experiment, fail, learn, and repeat quickly. You would rather own an outcome than be handed a task.

What you bring

• Hands-on ownership of infrastructure as code and CI/CD pipelines in AWS environments, together with the knowledge to build and maintain Linux machine images and navigate the intricacies of enterprise tool integrations and deployment.
• Python or Bash scripting beyond pipeline configuration, so you can automate the work the tools do not cover.
• A working command of cloud networking, access permissions, storage, and compute resources to deliver optimal functionality on budget and in line with security requirements.
• Judgment suited to building where security and auditability are not optional.

You adapt your development workflow as AI tools evolve, using them to help implement, test, and improve the components you own. You give the tools clear context, review and test their output, and remain accountable for the code you deliver.

When we talk

Be prepared to discuss a difficult problem you worked through, the decisions you made, what happened, and what you learned.

Benefits

Medical, dental, and vision with the employee premium fully paid and half of dependent premiums; employer-paid life, accidental death, and short-term and long-term disability insurance; a 401(k) matched 100% up to 4% of salary, vesting immediately; unlimited paid time off; and sponsored professional certifications and continuing education.

What we offer

You will work alongside developers, engineers, data scientists, architects, and strategists, on work ranging from strategy to implementation. We support your development across assignments and clients through extensive onboarding, sponsored professional certifications such as the Data Management Capability Assessment Model (DCAM) and AWS technical certifications, and rotation across functions to expand your skills and perspective. The mission is real, the problems are hard, and you own what you ship.

What we commit to

As a Benefit Corporation, our commitment runs three ways: real, measurable value for our clients; government that works better for the public; and a team that makes everyone in it better.