DevSecOps Engineer
Leidos•Arlington, VA
•$107,900 - $195,050•Onsite
About The Position
Leidos’ Digital sector is seeking a Systems Engineer with strong DevSecOps, identity security, and systems-integration expertise to support the Defense Information Systems Agency (DISA) Compartmented Enterprise Services Office (CESO). The role is primarily responsible for the software delivery platform, GitLab administration, CI/CD architecture, deployment automation, and developer enablement. Cloud infrastructure, Kubernetes platform administration, and cloud operations are performed in close partnership with the Cloud Systems Owner team. The position is 100% on-site in Arlington, Virginia. Candidates must have an active TS clearance with SCI eligibility and be willing and able to obtain a polygraph in the future. The job supports multiple software development teams and includes participation in Agile ceremonies.
Requirements
- Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Engineering, or a related field with 8–12 years of relevant experience, or a master’s degree with 6–10 years of experience; additional experience may be considered in lieu of a degree.
- Active TS clearance with SCI eligibility.
- Ability to obtain and maintain a CI Poly and Special Program Access.
- IAT Level II certification or higher, such as Security+ CE, CySA+, SSCP, or CISSP.
- Extensive experience designing, implementing, and administering enterprise CI/CD platforms supporting large-scale software development.
- Advanced experience developing and administering GitLab CI/CD pipelines, including GitLab Runners, reusable pipeline templates, variables, artifacts, deployment workflows, and pipeline optimization.
- Extensive experience administering GitLab repositories, merge requests, branching strategies, permissions, source code management, and platform governance.
- Extensive experience developing Infrastructure as Code using Terraform, AWS CloudFormation, or similar technologies.
- Advanced experience deploying containerized applications (Docker, Kubernetes) using Helm, GitOps methodologies, or comparable deployment tools.
- Strong experience developing automation using Bash, Python, or similar scripting languages.
- Experience administering Linux environments supporting CI/CD platforms and software development workflows.
- Experience supporting AWS cloud services and cloud-native application deployments.
- Extensive knowledge of software supply chain security, secrets management, dependency management, secure software development practices, and automated security testing.
- Experience integrating automated testing, quality gates, compliance validation, and security scanning into enterprise CI/CD pipelines.
- Demonstrated ability to contribute to technical initiatives, apply engineering standards, and improve software delivery practices.
- Strong troubleshooting, communication, collaboration, and problem-solving skills.
- Ability to obtain an SF-85 Public Trust suitability determination (the posting notes this is to be updated for DISA clearance requirements).
- U.S. citizenship.
- Ability and willingness to obtain a polygraph in the future.
Nice To Haves
- Experience supporting DoD or other Federal software development programs.
- Experience supporting DevSecOps initiatives in large Agile or SAFe software development organizations.
- Experience implementing enterprise GitOps deployment methodologies using GitLab and Kubernetes.
- Experience with GitLab Ultimate Security, SonarQube, Checkmarx, Veracode, Snyk, Trivy, or similar security analysis platforms.
- Experience administering GitLab Container Registry, Nexus Repository Manager, Artifactory, or comparable artifact management platforms.
- Experience supporting cloud-native application development using Kubernetes and AWS.
- Experience implementing automated testing, deployment approvals, quality gates, compliance validation, and release governance within CI/CD pipelines.
- AWS, GitLab, Kubernetes, Terraform, or comparable industry certifications.
Responsibilities
- Engineer, administer, and continuously improve the GitLab platform, including projects, groups, runners, repositories, permissions, scalability, and operational health.
- Develop and maintain reusable GitLab pipeline templates, shared libraries, automation frameworks, and deployment workflows that support enterprise CI/CD standards and improve consistency, maintainability, and engineering productivity across Agile development teams.
- Implement and continuously improve automated application security, software supply chain security, and compliance validation throughout the CI/CD lifecycle, including SAST, software composition analysis, container image scanning, secrets detection, and Infrastructure-as-Code scanning.
- Develop and maintain standardized deployment patterns for Kubernetes applications using GitOps methodologies, Helm, progressive deployment techniques, and automated deployment validation.
- Administer GitLab Container Registry, package repositories, artifact repositories, and software dependency management platforms supporting secure software delivery.
- Collaborate with Cloud Systems Owners to ensure cloud platforms support automated software deployment, operational scalability, application resiliency, and platform reliability.
- Partner with software development teams to improve build performance, deployment reliability, release quality, and developer productivity through automation and self-service engineering capabilities.
- Partner with cybersecurity teams to align DevSecOps capabilities with organizational security policies, Federal guidance, and continuous monitoring requirements.
- Troubleshoot and perform root cause analysis for complex build failures, deployment issues, pipeline performance problems, dependency management challenges, and software delivery failures.
- Participate in peer reviews of pipeline designs, deployment strategies, and automation solutions to promote consistency, maintainability, and adherence to established standards.
- Monitor and report software delivery performance metrics, including pipeline reliability, deployment success rates, build performance, and deployment frequency, and identify opportunities to improve engineering productivity and operational excellence.
- Contribute to DevSecOps engineering standards, pipeline documentation, release management processes, operational guidance, and platform governance documentation.
- Evaluate emerging DevSecOps technologies, AI-assisted software engineering capabilities, software delivery methodologies, and automation techniques, and recommend improvements to engineering productivity, security, and operational efficiency.
- Participate in Agile ceremonies while supporting multiple software development teams.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
