HarnessTraceable Integration Engineer (Senior)

Koniag Data Solutions a Koniag Government Services company is seeking an experiencedHarness/Traceable Integration Engineer (Senior)to support enterprise DevSecOps operations API security and IT administrative and operational support services for a federal government client. This position requires an active security clearance or the ability to obtain and maintain a government background investigation and all requisite IT access authorizations prior to performing work. Specific clearance requirements will be confirmed at time of offer. Primary work will be performed at the client site in Washington DC and approved remote/telework offer competitive compensation and an extraordinary benefits package including health dental and vision insurance 401K with company matching flexible spending accounts paid holidays three weeks paid time off and role serves as a critical senior technical function responsible for the architecture engineering implementation administration and continuous improvement of enterprise Harness software delivery platform and Traceable AI API security capabilities across a complex geographically distributed federal IT environment spanning on-premises infrastructure cloud platforms and hybrid ideal candidate is a highly experienced and technically authoritative DevSecOps and API security engineer with deep hands-on expertise across the Harness platform portfolioincluding Harness Continuous Integration (CI) Continuous Delivery (CD) Feature Flags Cloud Cost Management and Security Testing Orchestration (STO)and Traceable AI API security capabilities combined with a comprehensive understanding of modern software delivery practices API security principles Zero Trust Architecture and Federal cybersecurity compliance requirements. This individual must possess the technical depth architectural vision and operational discipline required to lead the design implementation and sustained operation of enterprise-grade Harness and Traceable capabilities that accelerate secure software delivery and protect Government APIs and applications in a highly regulated federal IT Harness/Traceable Integration Engineer (Senior) will serve as the programs primary subject matter expert and technical authority for all Harness and Traceable platform capabilities leading the architecture engineering implementation administration and continuous improvement of enterprise software delivery and API security infrastructure. This individual works closely with software developers security engineers cloud operations teams DevSecOps engineers network security engineers and Government stakeholders to ensure Harness and Traceable platforms are architected deployed and operated in a manner that delivers maximum software delivery velocity security assurance API visibility and compliance with Federal cybersecurity frameworks and Zero Trust Architecture objectives across the full enterprise responsibilities will include but are not limited to:Architecture & Engineering LeadershipServe as the programs technical authority and subject matter expert for all Harness and Traceable platform capabilities providing authoritative architectural guidance engineering leadership and expert technical recommendations to program leadership functional teams and Government stakeholders on software delivery pipeline strategy API security architecture and DevSecOps the design and architecture of enterprise Harness software delivery solutions including CI pipeline architecture CD pipeline design Security Testing Orchestration (STO) integration Feature Flag management frameworks and Cloud Cost Management configurations aligned with program delivery objectives and Federal security the design and architecture of enterprise Traceable AI API security implementations including API discovery and inventory management API threat detection and protection API behavioral analytics and API security posture management across all Government application and maintain enterprise Harness and Traceable architecture documentation including pipeline architecture diagrams API security topology diagrams integration architecture specifications and platform configuration baselines ensuring documentation is current accurate and aligned with operational security architecture reviews for new applications infrastructure changes and software delivery pipeline modifications assessing Harness and Traceable platform impact identifying security gaps and recommending configuration and policy emerging Harness and Traceable platform capabilities DevSecOps industry developments and API security trends providing well-researched recommendations to program leadership and Government stakeholders on opportunities to advance software delivery maturity and API security senior technical leadership and mentorship to junior and mid-level engineers sharing DevSecOps and API security expertise guiding technical development and ensuring consistent application of engineering best practices across the CI/CD Pipeline Engineering & AdministrationLead the engineering implementation and administration of enterprise Harness Continuous Integration (CI) and Continuous Delivery (CD) pipelines designing and implementing scalable secure and maintainable pipeline architectures that support rapid reliable software delivery across all program development teams and application and implement Harness CI pipeline configurations including build stage definitions test automation integrations artifact management configurations code quality gate integrations and parallel execution strategies that maximize build velocity and and implement Harness CD pipeline configurations including deployment stage definitions environment-specific deployment strategies (rolling blue-green canary) approval gate workflows verification configurations and automated rollback capabilities across development test staging and production and maintain Harness pipeline-as-code configurations using YAML-based pipeline definitions ensuring all pipeline configurations are version-controlled well-documented templated for reuse and maintainable by development and maintain Harness pipeline templates step libraries and reusable pipeline components promoting pipeline consistency reducing duplication and accelerating pipeline development across the programs application and maintain Harness connector configurations for all integrated platforms including source code repositories (GitHub GitLab Bitbucket) artifact registries (JFrog Artifactory Docker Hub AWS ECR) Kubernetes clusters cloud providers and notification and maintain Harness environment and infrastructure definitions ensuring deployment targets are accurately represented access-controlled and consistently managed across all pipeline stages and deployment Harness CI/CD pipeline health build success rates deployment frequency lead time and change failure rates proactively identifying and resolving pipeline failures performance bottlenecks and reliability Security Testing Orchestration (STO) EngineeringLead the engineering implementation and administration of Harness Security Testing Orchestration (STO) capabilities designing and implementing a comprehensive security testing integration framework that embeds automated security testing throughout the CI/CD pipeline and implement STO scanner integrations across all relevant security testing tool categories including Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA) container image scanning and Infrastructure as Code (IaC) security and maintain STO security gate policies defining risk-based vulnerability thresholds exemption management procedures and pipeline enforcement rules that automatically block or flag deployments containing unacceptable security and maintain STO deduplication normalization and correlation capabilities ensuring security findings from multiple scanner sources are accurately consolidated prioritized and presented to development teams in a clear actionable and maintain STO exemption management workflows ensuring security finding exemptions are properly reviewed approved documented and time-limited in accordance with defined governance procedures and risk acceptance STO security findings with the enterprise vulnerability management program and SIEM platform ensuring pipeline security scan results are incorporated into the programs broader vulnerability tracking and security monitoring STO pipeline integration health scanner coverage and security gate effectiveness proactively identifying and resolving scanner failures coverage gaps and policy enforcement Feature Flags Engineering & AdministrationLead the engineering implementation and administration of Harness Feature Flags capabilities designing and implementing a comprehensive feature flag management framework that supports controlled feature releases A/B testing progressive delivery and kill switch capabilities across the programs application and implement Harness Feature Flag SDK integrations across all relevant application development languages and frameworks ensuring feature flag capabilities are consistently available and properly implemented across all supported and maintain Harness Feature Flag environments targeting rules and flag lifecycle management policies ensuring feature flags are properly governed regularly reviewed and retired in accordance with defined flag lifecycle management and maintain feature flag governance standards ensuring flags are properly named documented scoped and managed throughout their lifecycle to prevent flag accumulation and technical Cloud Cost Management EngineeringLead the engineering implementation and administration of Harness Cloud Cost Management capabilities providing comprehensive cloud cost visibility optimization recommendations and governance enforcement across enterprise cloud and maintain Harness Cloud Cost Management integrations with enterprise cloud accounts including AWS and Microsoft Azure ensuring accurate cost attribution resource tagging enforcement and budget alerting are consistently and maintain cloud cost dashboards reporting configurations and cost anomaly alerting capabilities providing program leadership and Government stakeholders with accurate timely visibility into cloud spending trends and optimization cloud cost optimization activities identifying and implementing cost reduction opportunities through rightsizing recommendations reserved instance analysis idle resource identification and workload scheduling AI API Security Engineering & AdministrationLead the engineering implementation and administration of the Traceable AI API security platform designing and implementing comprehensive API discovery inventory management threat detection and protection capabilities across all Government application and implement Traceable agent deployments across all in-scope application environments including Kubernetes-hosted applications cloud-native services and on-premises application deployments ensuring comprehensive API traffic visibility and behavioral baseline and maintain Traceable API discovery and inventory management capabilities ensuring all APIsincluding undocumented shadow and zombie APIsare continuously discovered inventoried and assessed for security risk across the enterprise application and maintain Traceable API threat detection policies including API abuse detection rules injection attack protection authentication bypass detection sensitive data exposure monitoring and API-specific behavioral anomaly detection and maintain Traceable API security posture management capabilities ensuring APIs are continuously assessed for security misconfigurations authentication weaknesses excessive data exposure and compliance with defined API security standards and OWASP API Security Top 10 and maintain Traceable API behavioral analytics configurations including user and service baseline modeling anomalous traffic pattern detection and API-level rate limiting and throttling Traceable API security findings with the enterprise SIEM platform vulnerability management program and incident response workflows ensuring API threat detections and security posture findings are incorporated into the programs broader security monitoring and remediation Traceable platform health agent coverage and detection output quality proactively identifying and resolving platform issues API coverage gaps and detection fidelity Security Governance & StandardsDevelop and maintain enterprise API security standards governance frameworks and design guidelines ensuring all Government APIs are developed deployed and maintained in accordance with defined security requirements and industry best API security architecture reviews for new and existing Government applications identifying security risks recommending remediation actions and ensuring APIs meet defined security standards before deployment to production and maintain API security assessment and testing procedures supporting periodic API security assessments and integrating API security testing into the CI/CD pipeline through Harness STO and Traceable expert API security guidance to application development teams supporting secure API design authentication and authorization implementation input validation and sensitive data handling best Integration & AutomationLead the integration of Harness and Traceable platforms with the broader enterprise DevSecOps toolchain ensuring seamless data exchange automated workflow triggers and consistent security policy enforcement across all integrated and maintain Harness and Traceable platform API integrations and automation scripts leveraging platform APIs to implement custom automation workflows reporting capabilities and integration bridges between Harness Traceable and adjacent enterprise the implementation of GitOps delivery patterns using Harness CD ensuring application and infrastructure configurations are managed declaratively through version-controlled Git repositories with automated synchronization to target Harness pipelines with enterprise secrets management platforms including HashiCorp Vault and cloud-native secrets managers ensuring sensitive credentials and configuration data are securely managed throughout pipeline and maintain pipeline observability and analytics capabilities ensuring Harness pipeline performance metrics deployment frequency data and DORA metrics are accurately collected reported and integrated into program delivery performance Management & OperationsLead the preparation and submission of Harness and Traceable change requests for Change Advisory Board (CAB) review developing comprehensive implementation plans technical impact assessments rollback procedures and test plans for all significant platform with the change management process to ensure all Harness and Traceable platform changes are properly reviewed approved scheduled and implemented without degradation to pipeline operations security posture or service post-implementation reviews for significant platform changes documenting outcomes unexpected impacts and lessons learned to continuously improve change execution and maintain comprehensive Harness and Traceable operational runbooks standard operating procedures and knowledge base articles ensuring documentation supports reliable and consistent platform ATO & Continuous MonitoringEnsure all Harness and Traceable platforms are configured and maintained in compliance with applicable Federal cybersecurity frameworks and requirements including NIST SP 800-53 FISMA FedRAMP NIST SP 800-207 Zero Trust Architecture OMB M-22-09 applicable DISA STIGs and client-specific cybersecurity ATO activities for Harness and Traceable platforms including security control implementation documentation system security plan (SSP) contribution continuous monitoring reporting and audit evidence regular platform configuration compliance assessments identifying and remediating configuration deviations from applicable security baselines and Federal compliance vulnerability management activities for Harness and Traceable platforms tracking and remediating platform vulnerabilities identified through vendor advisories vulnerability scanning and continuous monitoring and maintain platform compliance documentation including configuration baseline specifications security control implementation evidence and audit artifacts supporting the programs ATO and continuous monitoring and Experience:Required:Bachelors degree in Computer Science Software Engineering Information Technology Cybersecurity or a related field from an accredited college or university. Equivalent combination of education and directly relevant experience may be of 7 years of hands-on experience in DevSecOps engineering software delivery pipeline development application security or a closely related discipline within a federal government IT contracting or enterprise software delivery hands-on experience designing implementing and administering enterprise CI/CD pipeline platforms with at least 23 years of direct Harness platform experience or extensive experience with comparable enterprise CI/CD platforms (e.g. Jenkins GitLab CI/CD Azure DevOps) combined with demonstrated Harness platform with API security engineering including API discovery API threat detection and API security posture management concepts and supporting software delivery or application security activities in a federal government IT contracting environment including familiarity with applicable Federal cybersecurity compliance security clearance or the ability to obtain and maintain a government background investigation and all requisite IT access authorizations. Specific clearance requirements will be confirmed at time of :Prior experience serving as a senior Harness platform engineer or architect on a federal IT program of comparable scale and -on experience with Traceable AI or equivalent API security platform engineering and supporting FedRAMP authorization activities and implementing DevSecOps security controls within AWS GovCloud and/or Microsoft Azure Government Skills and Competencies:Deep technical expertise with enterprise CI/CD pipeline platform engineering with demonstrated hands-on proficiency in pipeline design pipeline-as-code development deployment strategy implementation security testing integration and pipeline reliability Harness platform expertise including demonstrated proficiency with Harness CI Harness CD Harness STO pipeline template development connector management and environment and infrastructure definition API security engineering skills including demonstrated experience with API discovery API inventory management API threat detection API behavioral analytics and OWASP API Security Top 10 understanding of DevSecOps principles and practices including shift-left security integration security testing automation secrets management infrastructure as code security and supply chain risk management as applied within enterprise CI/CD with container and Kubernetes environments including Kubernetes-based application deployment patterns Helm chart management and container security practices as they relate to Harness CD and Traceable agent of Federal cybersecurity frameworks and compliance requirements including NIST SP 800-53 FISMA FedRAMP NIST SP 800-207 Zero Trust Architecture OMB M-22-09 and applicable DISA proficiency with scripting and programming languages including Python Bash PowerShell or equivalent for pipeline automation platform API integration and operational tooling with cloud platform operations across AWS and/or Microsoft Azure Government environments including cloud-native service integration with CI/CD pipelines and cloud security control understanding of GitOps principles and version-controlled infrastructure and application configuration management practices as applied within enterprise software delivery written and verbal communication skills with demonstrated ability to develop comprehensive architecture documentation operational runbooks and technical briefing materials for both technical and non-technical leadership and mentorship skills with demonstrated ability to provide technical guidance and develop the capabilities of junior and mid-level team Skills and Competencies:Harness Certified Engineer or equivalent Harness platform certification strongly Kubernetes Administrator (CKA) or Certified Kubernetes SecurityOur Equal Employment Opportunity Policy:The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race color religion creed ethnicity sex sexual orientation gender or gender identity (except where gender is a bona fide occupational qualification) national origin or ancestry age disability citizenship military/veteran status marital status genetic information or any other characteristic protected by applicable federal state or local law. We are committed to equal employment opportunity in all decisions related to employment promotion wages benefits and all other privileges terms and conditions of company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or to apply to a position on our website please contact Heaven Wood via e-mail at or by calling to request accommodations. Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical professional and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers employees and native communities. For more information please visit Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352