DevSecOps Engineer

Leidos•Arlington, VA

18d•Onsite

About The Position

Leidos’ Digital sector is seeking a DevSecOps Engineer to support the Defense Information Systems Agency (DISA) Compartmented Enterprise Services Office (CESO). The role focuses on the software delivery platform, GitLab administration, CI/CD architecture, deployment automation, and developer enablement. Cloud infrastructure, Kubernetes platform administration, and cloud operations are performed in close partnership with the Cloud Systems Owner team. The position is 100% on-site in Arlington, Virginia. Candidates need an active TS clearance with SCI eligibility and must be willing and able to obtain a poly in the future. The engineer will design, operate, and improve secure enterprise software delivery capabilities, working with Agile development teams, Cloud Systems Owners, and cybersecurity teams. The work includes automating security and compliance throughout the CI/CD lifecycle, supporting Kubernetes deployments, diagnosing complex delivery problems, and contributing to platform standards, documentation, governance, and engineering productivity improvements. The role also involves evaluating emerging DevSecOps technologies and participating in Agile ceremonies across multiple software development teams.

Requirements

Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Engineering, or a related field and 8–12 years of relevant experience, or a master’s degree and 6–10 years of experience; additional experience may be considered in lieu of a degree.
Active TS clearance with SCI eligibility.
Ability to obtain and maintain a CI Poly and Special Program Access.
IAT Level II certification or higher, such as Security+ CE, CySA+, SSCP, or CISSP.
Extensive experience designing, implementing, and administering enterprise CI/CD platforms for large-scale software development.
Advanced experience developing and administering GitLab CI/CD pipelines, including GitLab Runners, reusable pipeline templates, variables, artifacts, deployment workflows, and pipeline optimization.
Extensive experience administering GitLab repositories, merge requests, branching strategies, permissions, source code management, and platform governance.
Extensive experience developing Infrastructure as Code using Terraform, AWS CloudFormation, or similar technologies.
Advanced experience deploying containerized applications with Docker and Kubernetes using Helm, GitOps methodologies, or comparable tools.
Strong experience developing automation using Bash, Python, or similar scripting languages.
Experience administering Linux environments that support CI/CD platforms and software development workflows.
Experience supporting AWS cloud services and cloud-native application deployments.
Extensive knowledge of software supply chain security, secrets management, dependency management, secure software development practices, and automated security testing.
Experience integrating automated testing, quality gates, compliance validation, and security scanning into enterprise CI/CD pipelines.
Demonstrated ability to contribute to technical initiatives, apply engineering standards, and improve software delivery practices.
Strong troubleshooting, communication, collaboration, and problem-solving skills.
Ability to obtain an SF-85 Public Trust suitability determination.
U.S. citizenship.

Nice To Haves

Experience supporting DoD or other Federal software development programs.
Experience supporting DevSecOps initiatives in large Agile or SAFe software development organizations.
Experience implementing enterprise GitOps deployment methodologies using GitLab and Kubernetes.
Experience with GitLab Ultimate Security, SonarQube, Checkmarx, Veracode, Snyk, Trivy, or similar security analysis platforms.
Experience administering GitLab Container Registry, Nexus Repository Manager, Artifactory, or comparable artifact management platforms.
Experience supporting cloud-native application development using Kubernetes and AWS.
Experience implementing automated testing, deployment approvals, quality gates, compliance validation, and release governance within CI/CD pipelines.
AWS, GitLab, Kubernetes, Terraform, or comparable industry certifications.

Responsibilities

Engineer, administer, and continuously improve the GitLab platform, including projects, groups, runners, repositories, permissions, scalability, and operational health.
Develop and maintain reusable GitLab pipeline templates, shared libraries, automation frameworks, and deployment workflows that support enterprise CI/CD standards.
Implement and improve automated application security, software supply chain security, and compliance validation throughout the CI/CD lifecycle, including SAST, software composition analysis, container image scanning, secrets detection, and Infrastructure-as-Code scanning.
Develop and maintain standardized Kubernetes application deployment patterns using GitOps methodologies, Helm, progressive deployment techniques, and automated deployment validation.
Administer GitLab Container Registry, package repositories, artifact repositories, and software dependency management platforms.
Collaborate with Cloud Systems Owners so cloud platforms support automated software deployment, scalability, resiliency, and reliability.
Partner with software development teams to improve build performance, deployment reliability, release quality, and developer productivity through automation and self-service capabilities.
Partner with cybersecurity teams to align DevSecOps capabilities with organizational security policies, Federal guidance, and continuous monitoring requirements.
Troubleshoot and perform root cause analysis for build failures, deployment issues, pipeline performance problems, dependency management challenges, and software delivery failures.
Participate in peer reviews of pipeline designs, deployment strategies, and automation solutions.
Monitor and report software delivery performance metrics, including pipeline reliability, deployment success rates, build performance, and deployment frequency, and identify improvement opportunities.
Contribute to DevSecOps engineering standards, pipeline documentation, release management processes, operational guidance, and platform governance documentation.
Evaluate emerging DevSecOps technologies, AI-assisted software engineering capabilities, software delivery methodologies, and automation techniques, and recommend improvements.
Participate in Agile ceremonies while supporting multiple software development teams.