Full Stack & DevSecOps Engineer
Peraton
- Location
- Hybrid (Home, OH)
- Compensation
- $66k - $106k/yr
- Employment
- Full-time
- Level
- Mid Level
About the Role
Peraton is seeking a Full Stack & DevSecOps Engineer to build and operate a cutting-edge Agentic AI platform. This role combines application engineering with platform operations to support critical national security missions.
Skills
Perks
- Hybrid Work
- Discretionary Bonus
Full job details
Responsibilities
Peraton is seeking a talented and motivated Full Stack & DevSecOps Engineer to join a dynamic team building and operating a cutting-edge Agentic AI platform. This hybrid role sits at the intersection of application engineering and platform operations — combining the responsibilities of a Full Stack Engineer specializing in Agentic AI and External Integrations with those of a DevSecOps / Platform Engineer.
In this role, you will design, develop, and maintain the integrations and intelligent agent capabilities that power a next-generation decision-support platform, while also owning the delivery infrastructure, CI/CD pipelines, cloud operations, and platform health that keep it running securely and reliably. You will work across the full stack to connect AI agents with diverse external data sources, package real-world capabilities as reliable agent tools, and ensure that the systems you build are secure, scalable, observable, and production ready.
If you are passionate about applied AI, thrive in fast-moving environments, and take pride in building platforms that real users depend on — from the application layer down to the infrastructure — this is an opportunity to make a meaningful impact supporting critical missions.
Location: Columbus, Ohio — candidates must currently reside in the area or be willing to relocate.
Key Responsibilities
Full Stack & Agentic AI Engineering
- Design and build integrations to external sources of information, including public APIs, licensed data feeds, partner systems, customer enterprise systems, web content, document repositories, and structured databases
- Package external capabilities as agent tools and skills with clean interfaces, predictable inputs/outputs, sound error handling, and documentation usable by both AI agents and human configurators
- Develop and maintain full-stack components spanning FastAPI/Python backends, React frontends, Docker containerization, and PostgreSQL
- Build and consume web APIs (REST, GraphQL, or comparable), handling production integration concerns such as authentication, pagination, rate limiting, retry/backoff, schema mapping, deduplication, and caching
- Implement and maintain workflow and task orchestration pipelines using systems such as Airflow, Prefect, Celery, or comparable agent orchestration patterns
- Integrate LLMs into production or near-production applications, leveraging APIs such as OpenAI, Anthropic, or AWS Bedrock
- Apply security best practices specific to agentic and external integration work — including secrets management, OAuth and API-key handling, defensive parsing, and prompt-injection awareness
- Collaborate across teams with a product mindset, keeping the end-user experience central to technical decisions
DevSecOps & Platform Engineering
- Build and maintain CI/CD pipelines across GitHub Actions and/or GitLab CI, enabling secure, repeatable, and efficient delivery workflows
- Implement and improve automated testing and quality gates within the software delivery lifecycle, including build validation, integration checks, security testing, and deployment controls
- Plan and execute releases and deployments — coordinating change windows, managing release artifacts, running deployment automation, validating post-deployment health, and supporting rollback procedures
- Support operational ownership of Amazon EKS / Kubernetes environments, including cluster lifecycle activities, upgrades, troubleshooting, RBAC, Helm-based deployments, pod identity, and GitOps-aligned workflows
- Build and maintain AWS infrastructure supporting platform and application needs across services such as VPC, IAM, S3, RDS, CloudTrail, and KMS
- Contribute to infrastructure provisioning and lifecycle management through OpenTofu / Terraform and related infrastructure-as-code practices
- Administer user management for the platform — identity provider integration (SSO/SAML/OIDC), RBAC, provisioning and deprovisioning workflows, and periodic access reviews
- Design and operate a mature monitoring, logging, and alerting stack using CloudWatch, Prometheus/Grafana, or equivalent tooling
- Routinely assess system logs to detect anomalies, configuration drift, misuse, and security-relevant events; triage findings and drive remediation
- Build and maintain synthetic and transactional monitoring that exercises real authentication flows, user journeys, and critical service transactions
- Track and remediate Information Assurance Vulnerability Management (IAVM) notices and other vulnerability advisories — maintain inventory accuracy, drive patching to closure, and produce compliance reporting evidence
- Implement and maintain DAST and runtime security testing in delivery pipelines using tools such as OWASP ZAP, Burp, Nuclei, or equivalent
- Support security-focused CI/CD practices including secrets management, least privilege, software supply chain integrity, and audit evidence generation
Qualifications
Required Qualifications
- Minimum of a BA/BS degree with 2 years of experience; MS degree with 0 years of experience
- Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or Computer Engineering
- Hands-on experience building with AI agents — multi-step reasoning, tool use, RAG pipelines, or autonomous task execution
- Strong Python skills (3.12+); comfort with async/await patterns, type hints, and modern Python tooling
- Familiarity with agentic frameworks and an understanding of the underlying concepts (chains, tool calling, agent loops) that transfer across tools
- Experience operating CI/CD pipelines in GitHub Actions and/or GitLab CI
- Experience with cloud infrastructure (AWS) including VPC, IAM, S3, RDS, CloudTrail, and KMS
- Hands-on experience with Kubernetes (Amazon EKS preferred), including cluster upgrades, RBAC, Helm, and GitOps workflows
- Experience building and maintaining Terraform/OpenTofu infrastructure-as-code
- Strong skills in release planning, deployment automation, validation, and rollback procedures
- Experience with monitoring, logging, and alerting systems (CloudWatch, Prometheus, Grafana, or similar)
- Ability to perform anomaly detection, log analysis, and troubleshoot configuration and security issues
- Practical understanding of secrets management, least privilege, supply chain security, and audit evidence
- Experience performing vulnerability remediation and managing IAVM or similar compliance requirements
- Familiarity with DAST and runtime security testing tools (e.g., OWASP ZAP, Burp, Nuclei)
- Experience with identity provider integration (SSO/SAML/OIDC) and RBAC administration
- Comfort operating with some ambiguity in a fast-moving environment
Clearance Requirements
- U.S. Citizenship is required
- Ability to obtain a Public Trust
Desired Qualifications
- Production experience with agent frameworks (LangChain, LangGraph, LlamaIndex, CrewAI, AutoGen, OpenAI Agents SDK, Anthropic tool-use, or comparable) and a sound point of view on when each is the right tool
- Experience designing and operating retrieval-augmented generation (RAG) systems — chunking strategies, embedding models, vector stores, hybrid retrieval, reranking, and grounding/citation patterns
- Experience integrating with knowledge graphs, document stores, or curated content repositories as agent-accessible sources
- Experience evaluating agent and LLM systems — building eval harnesses, golden datasets, regression testing, and observability for non-deterministic systems
- Exposure to orchestration patterns: supervisor agents, parallel tool calls, human-in-the-loop flows, DAG-based pipeline execution
- Experience building plugin or extension systems: dynamic code loading, container isolation, API mixin patterns
- Familiarity with prompt engineering, evaluation frameworks, or agent observability
- Familiarity with federal compliance environments: FedRAMP, FIPS 140-2/3, IronBank container hardening, OPA policy enforcement, or Section 508 accessibility
- Experience with observability tooling: OpenTelemetry, Jaeger, Prometheus, Grafana, or similar distributed tracing/metrics stacks
- Experience with container orchestration (Docker SDK, Kubernetes) and distributed storage (S3, MinIO, JuiceFS)
- Experience designing synthetic or transactional monitoring tied to user journeys and critical service flows
- Experience developing SLOs, service health indicators, and high-fidelity operational alerting
- Experience with modern delivery patterns such as trunk-based development, merge-request-driven change, and automated release quality controls
- Experience in security-focused CI/CD or DevSecOps environments
- Experience coordinating with customer security teams or operating within compliance frameworks
- Prior work building internal tooling, enterprise automation products, or platforms for government customers
Peraton Overview
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.