Senior DevOps Engineer

Job Description

Job Description

Benefits:

• 401(k) matching
• 401(k)
• Health insurance
• Paid time off

Position Overview

Stealth Solutions is seeking a Senior DevOps Engineer to own release management, CI/CD, and platform administration for a large-scale Salesforce application supporting a U.S. Department of Commerce agency. The platform runs on Salesforce Government Cloud, and is built on Salesforce Public Sector Solutions with Experience Cloud, Service Cloud, and Omni Studio.

This is an ownership role. One engineer is accountable for everything that reaches production across several scrum teams working on a two-week sprint cadence. The application is configuration-first by design, so most of what moves through the pipeline is declarative metadata rather than custom code, and the release process has to handle Flow versioning, OmniStudio components, security and sharing changes, and Experience Cloud configuration alongside Apex and Lightning Web Components.

The current pipeline is built on GitHub Actions and is partially automated. There is clear room to close manual steps, tighten quality gates, and standardise promotion across teams. A migration to an enterprise Salesforce DevOps platform is planned, and the person in this role will lead that effort from design through cutover.

This position is designated Key Personnel by the Government and requires Contracting Officer approval before performance begins.

Core Responsibilities

• Release Management: Own the release process end to end across multiple scrum teams. Maintain a forward release plan, run change review and go/no-go decisions, manage deployment windows and freeze periods, maintain rollback procedures, and produce release notes and deployment records that stand up to audit. Accountable for a 90% first-time deployment success standard.
• CI/CD Engineering: Mature the existing GitHub Actions pipeline into a fully automated, consistently gated process: close remaining manual steps, standardise branching and pull request gates, enforce automated test execution and code coverage thresholds for staging and production promotion, and integrate static analysis. Establish a documented, repeatable promotion path in place of per-release improvisation.
• Environment and Org Management: Own the sandbox strategy: refresh cadence, data seeding, metadata drift detection, and environment-specific configuration. Remove environment coupling from deployable metadata, including hardcoded record IDs, org-specific endpoints, and test scaffolding that should not ship. Manage named credentials, connected apps, external services, and org limits across the environment chain.
• Salesforce Administration: Perform hands-on administration: users, profiles, permission sets and permission set groups, role hierarchy, sharing model, field-level security, and Experience Cloud guest and authenticated user access. Manage licence allocation, support Service Cloud administration for the help desk function, and maintain configuration documentation. Own Salesforce seasonal release readiness through preview sandbox testing, impact assessment, and remediation planning.
• Security and Compliance Operations: Operate within FedRAMP constraints on Salesforce Government Cloud. Maintain platform update currency, support security scanning and remediation tracking, and produce the configuration and deployment artifacts required for continuous monitoring and audit response. Support Section 508 verification gates in the release process.
• DevOps Platform Migration: Lead the planned migration to an enterprise Salesforce DevOps platform (Copado is the current direction). Scope spans tool evaluation support, pipeline and environment topology design, branching and promotion strategy, deployment configuration, automated regression coverage, cutover and parallel-run planning, and the security documentation required before connecting a third-party platform to a Government Cloud org. The migration must be delivered without a release freeze and without regressing deployment success during cutover.
• Reporting and Documentation: Maintain the DevOps Plan as a contract deliverable. Supply deployment success, build, and environment availability metrics for weekly and monthly status reporting. Track release work in Jira.
• Agile Participation: Participate in sprint planning, stand-ups, sprint reviews, retrospectives, and Scrum of Scrums. Represent deployment ability and operational risk during backlog refinement so release constraints surface before commitment rather than at the deployment window..

Minimum Requirements

• Education: Bachelor's degree in Computer Science or Engineering (any discipline), or equivalent demonstrated experience.
• Experience: Minimum 7 years of relevant professional experience, including substantial time owning release management or DevOps for a production Salesforce org.
• Certifications: Salesforce Certified Administrator or Platform Developer I required.
• CI/CD: Hands-on experience building and operating Git-based Salesforce CI/CD using GitHub Actions, Azure DevOps, Jenkins, Bitbucket Pipelines, or equivalent, with Salesforce CLI / SFDX, the Metadata API, source-tracked development, automated test execution, and quality gates.
• Platform: Production deployment experience across Experience Cloud and Service Cloud, or a comparable multi-cloud Salesforce implementation. Working knowledge of Apex, Lightning Web Components, Flow, and SOQL sufficient to triage a failed deployment and read a stack trace.
• Administration: Demonstrated depth in Salesforce security and sharing configuration, including profiles, permission sets, role hierarchy, sharing rules, and field-level security.
• Compliance: Must be eligible for Public Trust (Tier 2 / MBI). U.S. citizenship or permanent residency required.

Preferred Expertise

• Copado, Gearset, Flosum, or AutoRABIT experience, particularly leading a migration from a Git-native pipeline onto one of these platforms.
• Prior work in a Salesforce Government Cloud environment, including awareness of feature lag, restricted AppExchange availability, and the approval path for connecting external services.
• OmniStudio deployment experience using IDX Workbench or datapack-based migration.
• Salesforce Public Sector Solutions, particularly Grants Management, and familiarity with the federal grants lifecycle.
• MuleSoft Anypoint deployment and CloudHub release management.
• Deployment and configuration considerations for Agentforce, Data Cloud / Data 360, or Salesforce Headless APIs.
• Prior delivery on a federal Salesforce contract.
• SAFe certification or equivalent scaled agile experience.

Flexible work from home options available.