CD Engineer

Peraton•Chantilly, VA

1d•Onsite

About The Position

Peraton is seeking a Senior DevSecOps / CI/CD Engineer to lead the architecture, development, and continuous improvement of secure software delivery pipelines for a mission-critical enterprise platform supporting an Intelligence Community customer. The platform provides developers and mission teams a standardized environment across multiple classified enclaves and uses a zero-trust, hub-and-spoke architecture. The engineer will establish pipeline architecture, automation standards, and secure software delivery practices across platform services, infrastructure, and tenant applications. The role leads scalable CI/CD and GitOps workflows, integrates security controls throughout the software delivery lifecycle, and develops secure processes for promoting software artifacts across environments. The engineer collaborates with platform architects, cybersecurity leaders, integration and test teams, and operations personnel to meet mission, security, reliability, and compliance requirements. Technical leadership will improve delivery performance, strengthen continuous authorization practices, and support consistent delivery of capabilities to mission users. This position is fully onsite in Chantilly, Virginia.

Requirements

Active TS/SCI clearance with Polygraph.
Bachelor's degree in Computer Science, Software Engineering, Information Systems, or a related technical field, plus 8 or more years of relevant experience; an additional 4 years of relevant experience may substitute for a degree.
Extensive hands-on experience architecting, designing, and maintaining production CI/CD pipelines for software, infrastructure, or platform services.
Experience establishing pipeline engineering standards, reusable automation, and GitOps-based software delivery practices.
Experience deploying and managing containerized workloads using Docker, Kubernetes, or similar technologies.
Experience integrating and operationalizing automated security controls within CI/CD pipelines, including application security testing, software dependency analysis, container image scanning, or secrets detection.
Proficiency with Git and scripting languages such as Bash or Python.
Experience with infrastructure as code and deployment automation using Terraform, Ansible, Helm, or similar technologies.
DoD 8140 / 8570 IAT Level II certification, such as Security+ CE, or the ability to obtain the required certification within the applicable timeframe.

Nice To Haves

Experience architecting secure software delivery across multiple classified enclaves or disconnected environments.
Experience leading DevSecOps efforts for DoD or Intelligence Community software factories, hardened container image programs, or continuous ATO initiatives.
Experience implementing zero-trust architecture principles and policy-as-code tools such as OPA/Gatekeeper or Kyverno.
Experience establishing artifact management and software supply chain security practices using platforms such as Artifactory, Nexus, or Harbor.
Experience with code quality platforms such as SonarQube and observability tooling for pipeline and application monitoring.
Kubernetes certification such as CKA, CKAD, or CKS, and/or a cloud professional certification.
Prior experience supporting Intelligence Community or DoD mission programs.
Experience providing technical leadership, mentoring engineering teams, and coordinating secure software delivery across multiple engineering disciplines.

Responsibilities

Lead the design and implementation of CI/CD pipeline architectures for platform services, infrastructure, and tenant applications across multiple environments.
Establish pipeline engineering standards, reusable templates, GitOps practices, source control strategies, release versioning, and deployment automation.
Design scalable automation using GitLab CI, Jenkins, GitHub Actions, Argo CD, or similar technologies.
Automate software builds, testing, packaging, artifact management, and deployment to containerized environments.
Architect reusable pipeline components and self-service tooling to improve consistency, reduce onboarding time, and enable independent software delivery by development teams.
Establish infrastructure-as-code and deployment automation standards.
Evaluate pipeline architecture, identify technical risks and bottlenecks, and lead improvements to delivery performance, reliability, and maintainability.
Integrate automated security controls into CI/CD pipelines, including SAST, DAST, software composition analysis, container image scanning, secrets detection, and code quality validation.
Establish and maintain standards for hardened container base images, trusted software dependencies, approved artifact repositories, and secure artifact management.
Define processes to generate, validate, and maintain SBOMs, security scan results, and technical evidence supporting RMF authorization, auditability, and continuous ATO.
Design and implement secure artifact-promotion workflows across development, test, and production environments, coordinating approved transfers between classification levels with cross-domain engineering teams.
Partner with cybersecurity and compliance teams to ensure pipeline controls support applicable security requirements and authorization objectives.
Incorporate policy-as-code, automated compliance checks, and other security enforcement mechanisms into delivery workflows where appropriate.
Identify and mitigate software supply chain, pipeline configuration, artifact integrity, and deployment-process risks.
Establish metrics and operational practices for evaluating pipeline health, performance, and reliability.
Analyze delivery metrics, including deployment frequency, lead time for changes, change failure rate, and recovery time, and lead initiatives to improve delivery outcomes.
Lead investigation and resolution of complex pipeline, integration, and deployment issues across development and operational environments.
Coordinate release strategies and deployment activities with platform engineering, cybersecurity, integration and test, and operations teams.
Develop and maintain pipeline architecture documentation, engineering standards, operational procedures, and technical guidance.
Mentor junior and mid-level engineers, conduct technical reviews, and promote consistent engineering practices.
Advise technical stakeholders on pipeline architecture, automation strategy, secure delivery practices, and platform improvements.