DevSecOps Engineer, Senior

CACI•National Harbor, MD

1d•Hybrid

About The Position

The Senior DevSecOps Engineer will support the secure development, integration, deployment, and maintenance of AI-enabled applications and services for a United States Secret Service contract supporting the Department of Homeland Security. The role embeds security throughout the software development lifecycle and develops repeatable, automated deployment processes for cloud-based AI solutions. The engineer collaborates with AI engineers, software developers, cybersecurity, cloud, and operations teams to build and maintain CI/CD pipelines, automate security testing, and implement secure infrastructure and deployment patterns. The role helps ensure application code, cloud resources, containers, APIs, and AI-related data flows meet enterprise security requirements while enabling efficient updates. The work schedule is hybrid, with 2–3 days on site.

Requirements

Bachelor's degree and 7 years of experience in artificial intelligence, machine learning, software engineering, or a related field; stated equivalencies include a master's degree plus 7 years, 16 years with no degree, or an associate degree plus 12 years.
Ability to obtain Public Trust clearance.
At least five years of experience in DevSecOps, cloud engineering, software development, cybersecurity engineering, or a related field.
Demonstrated experience building or maintaining CI/CD pipelines and automating software build, test, and deployment processes.
Experience with infrastructure as code, such as Terraform, Bicep, or CloudFormation.
Experience with cloud security controls, including identity and access management, secrets management, encryption, and network security.
Experience integrating automated security testing into software delivery workflows, including vulnerability, dependency, and container scanning.
Experience with source control and pipeline platforms such as GitHub Actions, Azure DevOps, or GitLab CI/CD.
Familiarity with containers and container security, including Docker and Kubernetes.
Understanding of secure software development practices and common application security risks.
Ability to collaborate with developers, cybersecurity staff, cloud teams, and technical stakeholders to resolve security and deployment issues.

Nice To Haves

Experience supporting AI, machine learning, or generative AI applications in a cloud environment.
Experience securing Azure services, including Azure OpenAI or other Azure AI services.
Experience with Terraform and reusable infrastructure modules for cloud environments.
Familiarity with FedRAMP, FISMA, NIST security controls, or federal authorization processes.
Experience generating compliance evidence and automating security control assessments.
Experience with policy as code, configuration compliance, and automated cloud security posture management.
Experience securing APIs, model endpoints, data pipelines, and integrations with enterprise systems.
Relevant cloud, cybersecurity, or DevSecOps certifications.

Responsibilities

Build, maintain, and improve CI/CD pipelines for AI and software applications.
Integrate security checks into development and deployment workflows, including code, dependency, container, and infrastructure scanning.
Automate infrastructure provisioning and configuration using infrastructure as code.
Implement secure deployment patterns for cloud-hosted applications, APIs, containers, and AI services.
Apply security controls for identity and access management, secrets, encryption, network boundaries, and least-privilege access.
Work with AI engineers to protect prompts, model endpoints, retrieval pipelines, training or reference data, and connected tools from unauthorized access or exposure.
Support containerization and orchestration using technologies such as Docker and Kubernetes, where applicable.
Establish and maintain artifact management, configuration management, release controls, and deployment documentation.
Identify vulnerabilities and misconfigurations, and coordinate remediation with engineering and cybersecurity teams.
Support security assessments, authorization activities, audits, and compliance evidence collection.
Monitor pipeline and deployment issues, troubleshoot failures, and improve automation and developer workflows.
Document DevSecOps processes, security controls, pipeline configurations, and operational procedures.
Contribute reusable components, technical documentation, and engineering practices that improve consistency and maintainability.