Senior DevSecOps Engineer
About The Position
Join us in transforming how technology serves those who serve. At Leidos, we're not just delivering solutions – we're pioneering the future of defense and intelligence technology. Our diverse teams of innovators unite around a singular purpose: empowering our customers to succeed in their critical missions. We believe in leading with integrity, investing in our communities, and building sustainably for tomorrow. Shape the future of digital defense. Our Digital Modernization sector is at the forefront of next-generation technology, architecting cutting-edge solutions in cyber defense, logistics optimization, security operations, and decision intelligence. We're the minds behind the mission-critical systems that keep our nation secure. Your opportunity to lead transformation. Join the core engineering team building the new USCG DevSecOps platform that will be used by hundreds of mission-application developers across the Coast Guard. If you are an expert in building secure, automated platforms and want to make a tangible impact on a critical national security mission, this role is for you.
Requirements
- Bachelor's Degree and 12+ years in an IT discipline, with 5+ years in a hands-on DevSecOps role.
- Expert-level knowledge of GitLab CI, including building complex, reusable pipeline templates.
- Strong proficiency with Kubernetes
- Deep, practical expertise with Terraform in an AWS environment (GovCloud highly preferred).
- Hands-on experience implementing GitOps principles with Argo CD.
- Hands-on experience with observability tools, including Prometheus, Grafana, and a centralized logging stack (e.g., Loki, Vector, or Fluentd).
- Experience configuring log shipping to a SIEM.
- Solid understanding of cloud-native security, including container hardening and secrets management with HashiCorp Vault.
- Proficiency in a scripting language such as Bash, Python or Go
Nice To Haves
- Experience in a DoD/Federal environment with DISA STIG and RMF compliance mandates.
- Experience with AWS EKS, Red Hat OpenShift
- Software supply chain security tools (Cosign, Syft, Grype).
- An existing DoD security clearance.
- Certifications- Must have at least 1 certification to be considered.
- CNCF Kubernetes certifications: CKA or CKS or CKAD
- AWS Certified: DevOps Engineer or Solution Architect Associate or Security
- HashiCorp Certified: Terraform Associate
Responsibilities
- Design and implement the foundational CI/CD and Security infrastructure on AWS GovCloud utilizing modern Cloud native technologies, automation and “as-code” paradigms.
- Architect and maintain "Golden Path" CI/CD templates using GitLab CI Components.
- Engineer and automate the software supply chain, integrating SAST, SCA, container scanning, SBOM generation and artifact signing with Cosign/Sigstore.
- Develop modular Terraform code to provision and manage the platform's AWS GovCloud and Kubernetes infrastructure.
- Implement and manage all cluster-level and application configurations declaratively using GitOps (Argo CD), Kustomize, and Helm.
- Deploy, configure, and maintain the core platform services—including GitLab, Jira, Confluence, and HashiCorp Vault.
- Manage the GitLab Runner architecture on Kubernetes, ensuring fleet-wide security and scalability.
- Implement and validate the technical controls such as NIST 800-53 RMF based Authority to Operate (ATO).
- Automate security hardening and compliance checks using tools like OPA, Kyverno.
- Implement and manage the platform's observability stack, including centralized logging with Vector/Loki, metrics with Prometheus, and dashboards with Grafana.
- Configure secure log forwarding to the enterprise SIEM.
Benefits
- We believe in leading with integrity, investing in our communities, and building sustainably for tomorrow.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
