About Merlin Group
Merlin Group operates at the intersection of cyber innovation, national security, and technology-driven transformation. With a mission to accelerate the adoption of high-impact technologies across the U.S. public sector and regulated commercial markets, Merlin is uniquely structured around three core tenets – Invest, Enable, and Scale – each designed to address a specific stage of the technology lifecycle. Together, our affiliates – Merlin Ventures, CGC, and Merlin Cyber – form a flywheel that builds enduring capability for customers, partners, and the broader cyber ecosystem, operationalizing technological advancement into mission-ready, enterprise-grade solutions.
At Merlin, we believe our strength lies in our people. Team members are encouraged to be creative, collaborative, and nimble, pursuing paths to deliver the cutting-edge cybersecurity solutions that our customers rely on. From next-generation cyber defense to secure cloud and AI, we are united by one purpose – transforming innovation into mission impact.
The Opportunity
CGC is seeking a Principal Cloud & DevOps Integration Engineer to define, build, and standardize the operational, deployment, and infrastructure patterns used by ISVs across our FedRAMP-High and FedRAMP-Moderate platforms.
This role focuses on DevOps operations, cloud infrastructure, CI/CD automation, environment standardization, Kubernetes operations, observability, and compliance-aligned deployment models.
The ideal candidate brings deep experience designing and operating multi-region Kubernetes environments, Terraform-based cloud stacks, zero-downtime deployments, secure CI/CD pipelines, and cloud-native modernization of legacy workloads. This is a remote position.
Primary Duties & Responsibilities
Operational Architecture & Cloud Infrastructure
- Architect CGC’s cloud operational patterns for FedRAMP-High and FedRAMP-Moderate enclaves.
- Define standardized Terraform/IaC modules for network, compute, storage, identity, and multi-region failover.
- Create repeatable operational blueprints (RBAC, secrets, logging, ingress, service mesh, backup/restore, active/active patterns).
Kubernetes & Platform Operations
- Design and operationalize Kubernetes clusters that support multi-tenant ISV workloads.
- Develop hardened, compliant baseline cluster configurations (OPA/Gatekeeper, Pod Security, network policy, secrets management).
- Provide architectural guidance for SRE teams to scale, secure, and operate clusters with minimal variance.
DevOps & CI/CD Standardization
- Establish secure, regulated CI/CD patterns for all ISVs (GitOps, deployment gates, runtime policies, auditability).
- Develop zero-downtime deployment mechanisms: blue/green, canary, progressive delivery, multi-region rollouts.
- Create shared deployment pipelines, reusable GitHub/Azure DevOps templates, and operational runbooks.
Environment Lifecycle Management
- Build automation for environment provisioning, region expansion, scaling, and standardized service onboarding.
- Codify operational patterns that reduce SRE burden and improve predictability across ISV workloads.
- Build tooling to enforce platform consistency while enabling ISV flexibility.
Monitoring, Observability, & Reliability
- Define observability frameworks (metrics, logs, distributed traces) and integrate them into CGC’s platform patterns.
- Create standardized SLOs, alerting structures, operational dashboards, and incident response workflows.
- Drive operational readiness and reliability engineering practices across teams.
Security & Compliance Integration
- Embed FedRAMP, SOC2, HI-Trust controls directly into IaC, pipelines, cluster configuration, and deployment processes.
- Build automated guardrails that prevent drift or non-compliant configurations from entering sensitive enclaves.
- Partner with SOC and Compliance to ensure operational patterns remain audit-ready.
Cross-Team Leadership & ISV Enablement
- Work with Client Engagement teams to guide ISVs through operational onboarding and modernization.
- Alin with SRE team on platform operations, IaC, deployment architecture, and cloud-native best practices.
- Perform architectural reviews, environment assessments, and operational deep-dives with new and existing ISVs.
Qualifications
- DevOps, cloud engineering, or SRE roles.
- Deep expertise with Kubernetes, multi-region cloud architectures, containerization, and cluster operations.
- Strong experience with IaC, cloud networking, IAM, and secure cloud platform design.
- Proficiency implementing GitOps, CI/CD pipelines, blue/green and canary deployments, and automated release processes.
- Strong background in building high-availability, zero-downtime production environments.
- Experience working in healthcare, fintech, or other regulated industries.
- Fluent with monitoring/observability stacks (Prometheus, Grafana, ELK, OpenTelemetry)
- CKA, CKAD, or equivalent cloud-native certifications.
- Experience with Azure (AKS), AWS (EKS), or hybrid multi-cloud patterns.
- Familiarity with service mesh, secure secrets platforms, and runtime policy engines.
- Experience building operational automation platforms or internal developer platforms.
- Strong background in incident command, postmortem culture, and reliability engineering.
Success Attributes
- Commitment to personal and professional integrity and respect for others.
- Roll-up-your-sleeves attitude and low-ego approach.
- Commitment to teamwork and professional relationship development.
- Passion for lifelong learning, growth, and development.
- Flexible and nimble; comfortable with ambiguity and rapid change.
- Strong communication and functional project management skills.
- Desire to innovate, try new things, and creatively explore novel solutions to business challenges.
- Professional and respectful approach to the diversity of thought, action, identity, and attributes.
Benefits & Perks
We want to empower and inspire employees to be and do their best. Our workdays are dynamic, collegial, and fun. Our office features multiple places to work unconstrained by typical office barriers. Our wellness package provides access to an on-site gym and includes medical, dental, and vision insurance along with options for FSA and EAP. We offer 401(k) with employer match, unlimited PTO, and a culture respectful of the reality that not everything in one’s personal life is guaranteed to happen only after hours.
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.