Hatch IT
DevOps Engineer
- Compensation
- $120K–$140K / yr
- Location
- Washington, DC, US
- Arrangement
- Hybrid
- Employment type
- Full-time
- Posted
- 4 November 2026 (11 days ago)
Checked 2 days agoApplications go to the employer, never to RoleSprint
About this role
hatch I.T. is partnering with Expression to find an AI Architect (Technical Lead). See details below:
About The Role: Expression is seeking an experienced AI Architect to serve as Technical Lead designing and technically integrating advanced Artificial Intelligence (AI) and Large Language Model (LLM) capabilities supporting the Department of Homeland Security.
This role will support the development and integration of secure, mission-focused AI agents within the DHS AI environment. The selected candidate will lead the adaptation of multi-agent AI capabilities, including intelligent workflow orchestration, retrieval-augmented generation (RAG), model evaluation, and governed enterprise data integration, to enhance investigative analysis, information retrieval, report generation, and human decision support.
The ideal candidate is a hands-on AI architect and technical leader with extensive experience designing and delivering enterprise AI applications. You are equally comfortable defining system architecture, developing and reviewing production-quality software, integrating LLMs with enterprise data systems, and mentoring engineers through complex technical challenges.
This position requires a strong understanding of modern AI engineering, distributed application architectures, secure API development, and responsible AI deployment within highly regulated environments. You will work closely with AI engineers, data engineers, program leadership, and Government stakeholders to deliver reliable, explainable, secure, and scalable AI capabilities.
Location and Clearance: Clearance: Top Secret/SCI required Location: Shirlington, VA About the Company: Founded in 1997 and headquartered in Washington DC, Expression provides data fusion, data analytics, software engineering, information technology, and electromagnetic spectrum management solutions to the U.S. Department of Defense, Department of State, and national security community. Expression’s “Perpetual Innovation” culture focuses on creating immediate and sustainable value for their clients via agile delivery of tailored solutions built through constant engagement with their clients. Expression was ranked #1 on the Washington Technology 2018's Fast 50 list of fastest growing small business Government contractors and a Top 20 Big Data Solutions Provider by CIO Review.
Responsibilities: Cloud Infrastructure & Automation
• Deploy, configure, and maintain Azure resources supporting unclassified and classified spectrum management systems.
• Create and update Infrastructure as Code using established patterns and tools such as Terraform, Bicep, or ARM templates.
• Build and maintain Docker images and support container deployments using Kubernetes and Helm.
• Configure networking, access controls, and environment settings in coordination with senior engineers and security personnel.
CI/CD & Secure Software Delivery
• Develop and maintain Azure DevOps pipelines that automate application builds, testing, and deployments.
• Integrate and maintain code, dependency, container image, and infrastructure security checks using established tools and processes.
• Maintain deployment scripts, pipeline templates, artifacts, and release configurations, and support release approvals.
• Support deployments within restricted environments, following approved procedures for software dependencies and artifact handling.
• Work with developers to troubleshoot pipeline failures, deployment issues, and configuration differences across development, test, and production environments.
Security & Compliance
• Implement and maintain assigned security controls in accordance with applicable Department of Commerce, NTIA, and federal requirements.
• Apply approved configuration baselines and STIGs where required, and remediate identified vulnerabilities with guidance from security personnel.
• Support RMF, ATO, and continuous monitoring activities by collecting technical evidence and tracking remediation actions.
• Maintain secure handling of credentials, secrets, and deployment artifacts throughout the delivery process.
Reliability & Operations
• Configure and maintain monitoring, centralized logging, and alerts using established tools and standards.
• Investigate infrastructure and application issues, review logs, and support incident response and root cause analysis.
• Execute and help test backup, recovery, and rollback procedures.
• Keep deployment documentation, configuration records, and operational runbooks current.
• Support new application releases and production transitions in coordination with the broader engineering team.
Qualifications: • Active Secret security clearance or higher is required.
• Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
• Bachelor’s degree in Computer Science, Engineering, or a related field and three or more years of relevant DevOps/cloud engineering experience, or five or more years of relevant experience in lieu of a degree.
• Hands-on experience deploying and maintaining infrastructure in Microsoft Azure.
• Experience creating, modifying, and troubleshooting Azure DevOps YAML pipelines for builds, testing, security scanning, and deployments.
• Experience supporting application deployments across development, test, and production environments.
• Practical experience using Infrastructure as Code tools such as Terraform, Bicep, ARM templates, or comparable technologies.
• Experience building and running containers using Docker, with working knowledge of Kubernetes and Helm.
• Ability to write and troubleshoot automation scripts using Python, PowerShell, Bash, or similar languages.
• Experience using Git-based version control, including branches, pull requests, and collaborative code reviews.
• Working knowledge of Linux administration, cloud networking, access controls, secrets management, and monitoring and logging.
• Ability to investigate technical issues, document solutions, communicate progress, and work independently on assigned tasks while collaborating with the team.
Preferred Qualifications: • Experience with Azure Government, Azure Government Secret, or other restricted federal environments.
• Experience supporting federal system modernization or operational cloud services.
• Familiarity with NIST SP 800-53 controls, RMF, ATO support activities, or STIGs.
• Experience using security scanning tools such as Nessus, SonarQube, Microsoft Defender for Cloud, Aqua Security, or comparable products.
• Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
• Familiarity with database or search platforms such as SQL Server, PostgreSQL, Elasticsearch, or OpenSearch.
• Exposure to data engineering or machine learning workloads, including platforms such as Databricks or Apache Spark.
• Relevant Microsoft Azure administration, development, DevOps, or security certifications.
Benefits: Expression offers competitive salaries and benefits, such as: 401k matching PPO and HDHP medical/dental/vision insurance Education reimbursement Complimentary life insurance Generous PTO and holiday leave Onsite office gym access Commuter Benefits Plan
Work location
- Washington, DC, US
Related jobs
Ready to make a decision?
This role is either worth your time or it isn’t.
Analyze the posting against your experience, see the gaps clearly, and build the right materials only if the opportunity makes sense.
Nothing is submitted automatically. You choose what happens next.
About this listing
Published on Lever under the board identifier Hatchit, which is the name the employer’s own job board carries. RoleSprint has not verified the company’s registered or trading name, so it is shown exactly as published rather than tidied up.
RoleSprint is not the employer and not a recruiter. Applications are made on the employer’s own site and never reach us; what RoleSprint does is help you decide whether a role is worth your time and prepare for it if it is.
Published 4 November 2026, last checked 2 days ago. A posting stops being advertised here 90 days after the employer published it, and one the employer takes down is marked closed rather than quietly removed.