DevSecOps Engineer

Leidos develops large-scale simulation, training, and analysis systems for US Navy customers. The DevSecOps Engineer will administer DevSecOps and configuration management practices, build and operate cloud and container platforms, implement secure CI/CD pipelines, and provide technical leadership for simulation system development teams.

Responsibilities:

• Design, deploy, and maintain Kubernetes-based platforms such as AWS EKS and RKE2
• Deploy and manage containerized applications using Docker or Podman
• Develop, maintain, and troubleshoot Helm charts and Kubernetes manifests
• Configure and support Istio service mesh, Kubernetes networking, ingress, service discovery, configmaps, secrets, and workload security
• Design, deploy, and maintain infrastructure using OpenTofu or Terraform
• Develop Ansible automation for system configuration, software deployment, patching, and operational tasks
• Build reusable infrastructure modules, automation roles, templates, and deployment patterns
• Apply infrastructure-as-code principles, including version control, peer review, testing, and controlled promotion
• Support infrastructure provisioning and configuration across development, test, and production environments
• Design, implement, and maintain secure CI/CD pipelines using GitLab and GitLab Runners, or Jenkins
• Integrate automated build, test, security, packaging, and deployment stages
• Install, configure, troubleshoot, and integrate GitLab, GitLab Runners, Jenkins, Keycloak, Red Hat Identity Management or LDAP, Artifactory, Mattermost, Jira, Confluence, and SonarQube
• Establish secure Git workflows, including branching, merge requests, code reviews, tagging, releases, and change control
• Create reusable pipeline templates and shared CI/CD components
• Integrate security practices into all stages of the software development lifecycle
• Implement automated static application security testing, software composition analysis, dependency scanning, container image scanning, infrastructure-as-code scanning, secrets detection, license compliance, and software quality gates
• Support secure software supply chain practices, including artifact integrity, provenance, and traceability
• Support cATO, continuous monitoring, and automated compliance evidence collection
• Translate security and compliance requirements into technical controls, pipeline checks, and operational procedures
• Support vulnerability remediation, patch management, configuration compliance, and security assessment activities
• Administer and troubleshoot Red Hat Enterprise Linux (RHEL) or Rocky Linux systems
• Troubleshoot processes, services, networking, DNS, storage, permissions, package management, logging, and system performance
• Apply system hardening and operational security practices
• Design, deploy, and maintain cloud infrastructure in Amazon Web Services (AWS)
• Support cloud networking, identity and access management, compute, storage, monitoring, and security services
• Develop procedures for backup, recovery, upgrades, patching, and incident response
• Collaborate with developers, cybersecurity engineers, system administrators, cloud engineers, and technical leadership
• Lead troubleshooting for complex platform, pipeline, networking, authentication, and deployment issues
• Participate in architecture reviews, design sessions, code reviews, incident response, and root-cause analysis
• Establish reusable engineering standards and operational practices
• Mentor junior DevSecOps engineers and provide technical guidance
• Maintain technical documentation, diagrams, runbooks, and standard operating procedures

Requirements:

• Bachelor's Degree in Electrical Engineering, Computer Engineering or Computer Science, Math or the Sciences, Network Engineering, Systems Software, Information Technology, or a related technical degree
• You must have U.S. Citizenship and be eligible to obtain a U.S. Government granted security clearance
• You must have 5+ years of experience in DevSecOps, platform engineering, systems engineering, cloud engineering, software engineering, or a related field
• You must have professional experience with Kubernetes, Git, Istio or similar K8s service mesh, Helm charts, Ansible, OpenTofu or Terraform, and Docker or Podman
• You must have experience administering and troubleshooting Linux systems, particularly RHEL or Rocky Linux
• You must have experience designing, deploying, securing, or operating infrastructure in AWS
• You must have experience administering, integrating, or troubleshooting multiple software factory applications listed in this description (e.g. GitLab, Artifactory, etc.)
• Practical experience with Git workflows, CI/CD pipelines, infrastructure as code (IaC), container delivery, automated security testing, vulnerability management, continuous monitoring, and cATO
• Experience writing automation using Bash, Python, etc
• You must be able to diagnose complex technical problems across multiple infrastructure and application layers
• You must be able to communicate technical concepts clearly and produce high-quality documentation
• You must currently hold or be able to obtain certifications for Security+, entry-level Linux such as Linux+ or LPI Linux Essentials, and entry-level AWS such as AWS Cloud Practitioner
• Employment is contingent upon receiving an interim Secret security clearance
• Certifications for Kubernetes, Network+, or CCNA
• Operating RKE2 Kubernetes clusters and software factories in air-gapped, disconnected, or highly restricted environments
• Monitoring tools such as Grafana, Prometheus, and Loki
• Security tools such as Falco, AWS GuardDuty and Inspector
• UDS CLI and UDS packages
• Zarf for packaging, deploying, and managing applications in disconnected or air-gapped environments
• Zero-trust architecture, software bills of materials, artifact signing, image signing, provenance, or supply chain verification
• Deploying, securing, or maintaining AI and large language model platforms
• Policy as code, automated compliance enforcement, and observability platforms
• Supporting regulated, defense, classified, healthcare, financial, or other highly controlled environments
• Atlassian Software Development and Collaboration products (Jira, Confluence)