• Design and implement a CMMC-aligned GitLab architecture supporting 250–500+ users • Deploy and operate self-managed GitLab on Kubernetes using Crossplane • Architect secure GitLab runner strategies (pooling, isolation, autoscaling) for mixed workloads • Evaluate and document architectural approaches (single vs. segregated GitLab instances) with clear tradeoff analysis • Translate NIST 800-171 and CMMC requirements into enforceable GitLab configurations and access controls • Implement configuration-as-code using Terraform (e.g., GitLab provider) to ensure versioned, auditable, and repeatable platform management • Design and implement RBAC, least-privilege models, and segregation of duties • Establish drift detection and audit mechanisms to monitor and remediate unauthorized changes • Integrate GitLab into the broader Kubernetes platform ecosystem, including GitOps workflows (e.g., ArgoCD) • Produce architecture documentation, runbooks, and reference patterns to enable internal ownership and long-term sustainability • Collaborate with cybersecurity, architecture review boards, and platform teams to validate compliance and design decisions