​​Senior DevSecOps Engineer​

Leidos is a technology company delivering digital and mission solutions for government and commercial customers. The Senior DevSecOps Engineer will build and operate a secure USCG DevSecOps platform on AWS GovCloud, focusing on CI/CD, infrastructure as code, GitOps, platform services, compliance automation, and observability.

Responsibilities:

• As a senior member of the team, you will design and implement the foundational CI/CD and Security infrastructure on AWS GovCloud utilizing modern Cloud native technologies, automation and “as-code” paradigms
• CI/CD & Supply Chain Security: Architect and maintain "Golden Path" CI/CD templates using GitLab CI Components. Engineer and automate the software supply chain, integrating SAST, SCA, container scanning, SBOM generation and artifact signing with Cosign/Sigstore
• Infrastructure as Code (IaC) & GitOps: Develop modular Terraform code to provision and manage the platform's AWS GovCloud and Kubernetes infrastructure. Implement and manage all cluster-level and application configurations declaratively using GitOps (Argo CD), Kustomize, and Helm
• Platform Engineering: Deploy, configure, and maintain the core platform services—including GitLab, Jira, Confluence, and HashiCorp Vault. Manage the GitLab Runner architecture on Kubernetes, ensuring fleet-wide security and scalability
• Security & Compliance Automation: Implement and validate the technical controls such as NIST 800-53 RMF based Authority to Operate (ATO). Automate security hardening and compliance checks using tools like OPA, Kyverno
• Observability & Monitoring: Implement and manage the platform's observability stack, including centralized logging with Vector/Loki, metrics with Prometheus, and dashboards with Grafana. Configure secure log forwarding to the enterprise SIEM

Requirements:

• Bachelor's Degree and ​12+ years in an IT discipline, with 5+ years in a hands-on DevSecOps role
• ​Expert-level knowledge of GitLab CI, including building complex, reusable pipeline templates
• ​Strong proficiency with Kubernetes
• ​Deep, practical expertise with Terraform in an AWS environment
• ​Hands-on experience implementing GitOps principles with Argo CD
• ​Hands-on experience with observability tools, including Prometheus, Grafana, and a centralized logging stack (e.g., Loki, Vector, or Fluentd)
• Experience configuring log shipping to a SIEM
• ​Solid understanding of cloud-native security, including container hardening and secrets management with HashiCorp Vault
• ​Proficiency in a scripting language such as Bash, Python or Go
• Must have at least 1 certification to be considered
• ​CNCF Kubernetes certifications: CKA or CKS or CKAD
• ​AWS Certified: DevOps Engineer or Solution Architect Associate or Security
• ​HashiCorp Certified: Terraform Associate​
• GovCloud highly preferred
• ​Experience in a DoD/Federal environment with DISA STIG and RMF compliance mandates
• ​Experience with AWS EKS, Red Hat OpenShift
• ​Software supply chain security tools (Cosign, Syft, Grype)
• ​An existing DoD security clearance