DevSecOps Engineer - Test

CACI International•Sarasota, FL

47d•$78,000 - $163,800•Onsite

About The Position

CACI is seeking an experienced, hands-on, DevSecOps engineer to lead development of a CI/CD environment for a multi-tenant system with an emphasis on testing and hardening. This is a ground-up opportunity to architect and build comprehensive testing infrastructure and frameworks in a secure, containerized DoD environment. This role is perfect for someone who thrives in environments where they can shape and define testing standards and practices. This role requires a test engineer who can balance strategic thinking with hands-on implementation. The ideal candidate is a self-directed technical leader who will take ownership of building our testing infrastructure, is comfortable working independently, and excels at creating structure where none exists—someone who can independently design testing strategies, implement automated CI/CD pipelines in GitLab, and ensure all systems meet DoD DISA STIG requirements. In this position, you will be the primary architect for integration testing across distributed services, security compliance validation, and Infrastructure as Code testing practices. Experience with defense sector security requirements and active clearance eligibility are essential.

Requirements

Active TS/SCI clearance with Poly
Active Comptia Security+ certification, or ability to obtain one within 90 days of hire
Bachelor's degree in Computer Science, Engineering, or related discipline
Strong experience managing Red Hat Enterprise Linux 9 (RHEL 9) systems
Gitlab administration and CI/CD pipeline development experience
In-depth knowledge of DoD DISA STIG security standards and compliance testing
Experience with DevSecOps practices and integrating security into CI/CD pipelines
Experience with integration testing of distributed systems and microservices
Hands-on experience with Kubernetes container orchestration
Experience with Helm for Kubernetes package management
Proficiency with GitLab CI/CD pipelines and runners
Understanding of Infrastructure as Code (IaC) principles and testing
Strong understanding of security testing methodologies and tools
Experience using Atlassian tools for project management (JIRA, Confluence)

Nice To Haves

Experience deploying and debugging DSP (Digital Signal Processing) software
Experience developing, deploying, and troubleshooting Java applications
Experience developing, deploying, and troubleshooting Python applications
Wide breadth of experience with automated testing tools (Postman, REST Assured, Cypress, Selenium, etc.)
Knowledge of container vulnerability scanning tools
Knowledge of CVE remediation and container hardening
Experience with security testing tools (SAST, DAST, SCA)
Experience with IaC tools (Terraform, Ansible, etc.)
Experience with performance and load testing tools
Experience writing Helm charts

Responsibilities

Establish testing standards, DevSecOps practices, and security compliance processes from the foundation up, working with Java-based microservices deployed on Kubernetes with RHEL 9
Make critical decisions about tooling and frameworks while also writing test code, building pipelines, and hardening container deployments in Harbor and Kubernetes
Coordinate review of relevant program documentation with Responsible Engineers
Lead the test design; assist in DT&E I/FAT test planning, execution, and reporting.
Integral member of the Integrated Product Team (IPT) for each system recap or deployment, ensuring system is ready for customer-witnessed acceptance tests and fielding
Ensure test data are properly collected and recorded in a timely manner per the approved test plan