Senior DevSecOps Engineer

Leidos • Gaithersburg, MD

1d • Hybrid

About The Position

Leidos is seeking a Senior DevSecOps Engineer to support development of the Leidos Common Automation Platform (L-CAP) within the Air Traffic Business Area of the Homeland Sector. L-CAP is a mission-critical automation platform built on a hybrid cloud data mesh architecture to support next-generation air traffic management. The role works within a SAFe/Agile framework as part of an Agile Release Train and embraces AI-assisted development and modern engineering practices to improve productivity, quality, and delivery.

The position supports government programs and requires U.S. citizenship, successful completion of customer-required background investigations, and the ability to obtain and maintain a favorable Public Trust investigation. It is based in Gaithersburg, Maryland; Egg Harbor Township, New Jersey; or Eagan, Minnesota. For employees within a one-way commute of less than one hour, the position is hybrid, with three days onsite and two days working from home. Candidates outside commuting distance may be considered for a fully remote role.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related discipline with at least 8 years of experience; or a master’s degree with at least 6 years of experience; equivalent experience may substitute for a degree.
• Expertise building and maintaining CI/CD pipelines using Jenkins, GitLab CI, or GitHub Actions.
• Hands-on experience managing Kubernetes clusters and container orchestration.
• Proficiency with Terraform or equivalent infrastructure-as-code tools.
• Strong experience with Docker and containerization technologies.
• Solid Linux systems administration skills.
• Proficiency in Bash and Python scripting for automation.
• Experience with security scanning tools and DevSecOps practices.
• Understanding of networking, load balancing, and service mesh concepts.
• Familiarity with Agile/SAFe delivery and DevOps culture.
• Experience with software supply chain security tools or practices, such as Sigstore, SLSA, and SBOM generation.
• Knowledge of artifact management systems and build provenance tracking.
• Experience supporting internal developer platforms and developer experience initiatives.
• Ability to obtain and maintain a Public Trust investigation.
• U.S. citizenship required.
• Successful completion of background investigations as required by the government customer.

Nice To Haves

• Experience with cloud platforms such as AWS or Azure, including GovCloud environments.
• Knowledge of FedRAMP or government compliance requirements.
• Experience with monitoring tools such as Prometheus, Grafana, or the ELK stack.
• Familiarity with service mesh technologies such as Istio or Linkerd.
• Experience with GitOps workflows and tools such as ArgoCD or Flux.
• Knowledge of secrets management and PKI, including Vault or cert-manager.
• Experience in aviation, defense, or government program environments.
• Experience implementing developer portals such as Backstage or equivalent, and creating platform documentation.
• Commute of one hour or less to Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities

• Build and maintain CI/CD pipelines for continuous integration, testing, and delivery for L-CAP.
• Manage Kubernetes clusters and container orchestration for platform service deployments.
• Develop and maintain repeatable infrastructure using Terraform or other infrastructure-as-code tools.
• Integrate SAST, DAST, and SCA security scanning into CI/CD pipelines to support shift-left security.
• Manage container images, registries, and deployment artifacts across environments.
• Automate operational tasks, including provisioning, scaling, and configuration management.
• Manage development, test, and production environments to ensure consistency and reliability.
• Implement monitoring, logging, and alerting solutions for platform observability.
• Collaborate with development teams to improve build times, deployment frequency, and reliability.
• Support incident response and troubleshoot infrastructure and deployment issues.
• Implement software supply chain security controls, including SBOM generation, artifact signing, and dependency vulnerability scanning.
• Manage artifact repositories and build provenance to maintain the integrity of software deliverables throughout the pipeline.
• Support internal developer platform capabilities, including self-service environment provisioning, documentation, and developer experience improvements.
• Adopt AI-assisted development tools, automation, and modern engineering practices to improve productivity, code quality, and delivery velocity.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior