Tools Administrator (Contingent on Contract Award)

Own the toolset a thousand users per tool depend on, the identity layer behind it, and the change communications they act on.

This position is contingent upon contract award.

Innosoft Corporation is building the tools management function for a large digital services contract supporting a federal health agency. You will own configuration, administration, integration, the API surface, monitoring and the upgrade path for the project management toolset and its plugins, and serve as the named subject matter expert for the single sign-on and multi-factor authentication solution across the Atlassian suite and other applications.

You lead a team of four and sit at the intersection of every team on the contract, because when the tools are down, more than thirty delivery teams stop.

A structural change worth understanding. Today GitHub is managed by a separate contract team, so when a pipeline fails on a webhook, a repository permission or a quality gate integration, the platform team must engage an external team to investigate. This program places GitHub, SonarQube and the DevOps platform under one contract, and this role inherits that consolidated authority. The measurable effect is lower mean time to restore and a single point of accountability for pipeline health. The obligation is to make that consolidation real rather than nominal.

• Jira and plugins, Confluence and plugins, GitHub Enterprise and Cloud, SonarQube, Jira Service Management and more.
  
• Single sign-on and multi-factor authentication for the Atlassian suite plus Drupal and other applications.
  
• Up to approximately 1,000 users per tool.
  
• Four direct reports.
  
• Federal security audits and a valid Authority to Operate for all tools.
  
• 30 business days advance notice standard for availability or functionality changes.
  

• Remote within the continental United States, with periodic on-site presence in the Baltimore, MD area.
  
• Full-time, salaried. Reports to the Program Manager.
  
• Upgrade and maintenance windows regularly fall outside business hours, including evenings and weekends. Availability for those windows is a condition of the role.
  

Tool administration, identity and integration

• Configure, administer, integrate, monitor and upgrade the toolset and supporting plugins, recognising that the named tools reflect a point in time and may change at customer direction.
  
• Administer, configure and maintain the identity provider for all applications and serve as the named subject matter expert, enforcing least privilege, running quarterly access recertification for privileged roles, and deprovisioning within one business day of notification.
  
• Assume administration of GitHub Enterprise and Cloud and of SonarQube, including organization and repository administration, access governance, webhook and Actions configuration, Dependabot and secret protection, quality profile and gate assignment, and pull request decoration.
  
• Open APIs for automation and integration, provide a catalog of tool APIs, and implement API documentation, authentication, authorization and monitoring through an enterprise API gateway.
  
• Follow the federal target life cycle process, support security audits, and maintain a valid Authority to Operate for all tools.
  

Automation and validation

• Provision infrastructure through Infrastructure as Code in a repeatable and automated manner, package machine images from a single source configuration, and develop policy-based configuration, deployment and orchestration playbooks.
  
• Develop automated browser smoke and regression tests for all tools and automated API tests for all tool APIs.
  
• Use the CI platform for automated infrastructure validation, smoke and regression execution, OWASP security testing, compliance and vulnerability scanning, and container image scanning.
  
• Monitor licence and TLS certificate expirations and automate certificate rotation.
  

Documentation, communication and security

• Maintain the knowledge base and operations documentation including runbooks and standard operating procedures, and build institutional knowledge for each tool.
  
• Meet the bus-factor standard: every managed platform carries a runbook sufficient for a qualified engineer unfamiliar with it to perform routine operations and recover from a defined failure, validated annually by an independent recovery drill executed from the runbook alone.
  
• Draft clear user communications for tool upgrades, credentialing changes and licensing or certification requirements, including required user action steps.
  
• Retain responsibility for security testing of all managed tools including vulnerability scanning, penetration testing coordination and compliance validation.
  
• Document all architecture, infrastructure, external service, configuration and platform dependencies necessary to deploy, operate, maintain, secure and transition each service, so as to minimise vendor lock-in.
  

• U.S. person, able to obtain and maintain a federal Public Trust suitability determination and HSPD-12 PIV credential. In-person identity proofing required.
  
• All work performed within the continental United States. No exceptions.
  
• Company-issued, federally hardened equipment required. Personal devices are not permitted.
  

• 7+ years administering enterprise development and collaboration toolsets, including at least 3 as senior or lead administrator and at least 1 leading a team.
  
• Deep Atlassian administration at 1,000-plus user scale including workflow, scheme and permission architecture and marketplace app lifecycle.
  
• Demonstrated administration of an enterprise identity provider for SSO and MFA, ideally Okta, integrated with multiple downstream applications.
  
• Experience maintaining a federal Authority to Operate for a suite of tools, including coordinating security testing and remediating findings on deadline.
  
• Demonstrated record of executing upgrades without unplanned downtime.
  
• Hands-on Infrastructure as Code and practical automation across configuration management, image building and test automation.
  
• Demonstrated ability to write clear user-facing change communications for a large, non-technical audience.
  

Bachelor degree in a technical field, plus 7 years of relevant experience.

Equivalent combinations accepted: Master degree + 5 years, Associate degree + 9 years, High school diploma or GED + 11 years.

• Atlassian certification and experience with Jira Service Management and Atlassian Premier Support engagement.
  
• GitHub Enterprise administration at 10,000-plus repository scale, and SonarQube administration including quality gate governance.
  
• Prior experience with CMS identity management specifically, including troubleshooting alongside the agency identity team.
  
• Experience with Kong or an equivalent API gateway and with publishing an API catalog.
  

Atlassian Certified Professional Jira Administration strongly preferred at hire, with completion expected within twelve months where not held. Okta Certified Administrator or Professional strongly preferred. ACP Confluence Administration, AWS Solutions Architect Associate, ITIL 4 Foundation and CompTIA Security+ additionally preferred.

The salary range for this position is $130,000 to $135,000 annually. Actual compensation is determined by experience, qualifications, skills, location and internal equity. This range reflects the anticipated base salary and does not include bonus, benefits or other compensation.

This position is contingent upon contract award. Candidates selected will receive a contingent offer and will begin the federal suitability and credentialing process, which can take several weeks to several months. Employment begins only upon award and successful adjudication.

This role requires the use of company-issued equipment configured to federal security baselines. Personal devices may not be used to access client systems or data. Employees must complete federal security awareness, privacy and records management training and execute a non-disclosure agreement before performing any work.

Innosoft Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, physical or mental disability, genetic information, marital status, protected veteran status, or any other characteristic protected by applicable federal, state or local law.

As a federal contractor, Innosoft Corporation complies with its applicable equal employment opportunity and affirmative action obligations, including Section 503 of the Rehabilitation Act of 1973 and the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA).

Reasonable accommodation. If you need a reasonable accommodation to complete any part of the application or interview process, please contact [email protected] and we will work with you.

Employment is contingent upon successful completion of a background investigation, drug screening and reference checks in accordance with Innosoft Corporation policy.