DevSecOps Engineer

Leidos LLC; Bethesda (MD); Hybride; USD 87 000 - 157 000; Plein temps

Résumé du poste

Leidos is seeking an experienced DevSecOps/Platform Engineer to design, deploy, and secure large-scale simulation and training systems for U.S. Navy customers.

You will lead containerized platforms, automated infrastructure, and secure CI/CD pipelines, while collaborating with cloud, security, and development teams. You will work in a hybrid model with substantial remote work, and help standardize practices across the engineering group.

Qualifications

• 5+ years in DevSecOps, platform engineering, or cloud engineering.
• Experience with Kubernetes, Git, Istio, Helm, Ansible, and IaC (OpenTofu/Terraform).
• US citizenship and ability to obtain interim Secret clearance.
• Experience with AWS cloud and secure software supply chains.

Responsabilités

• Design, deploy, and maintain Kubernetes-based platforms and containers.
• Automate infrastructure with OpenTofu/Terraform and Ansible.
• Build and secure CI/CD pipelines with GitLab/Jenkins.
• Integrate security into the SDLC and supply chain.
• Administer Linux systems and AWS cloud services.
• Collaborate with cross-functional teams and mentor juniors.

Connaissances

Kubernetes

Git

Istio

Helm charts

Terraform/OpenTofu

Ansible

Docker/Podman

AWS

CI/CD

Linux

Security practices

SRE tooling

Formation

Bachelor’s Degree in Electrical/Computer Engineering or Computer Science or related technical field

Outils

GitLab

GitLab Runners

Jenkins

Keycloak

LDAP/Identity Management

Artifactory

Jira

Confluence

SonarQube

Docker

RHEL/ Rocky Linux

Description du poste

Leidos’ High Fidelity Simulation Business Area is responsible for architecting and implementing large-scale System of Systems solutions in support of world class simulation, training, and analysis products for the US Navy. You will get to work with state-of-the art technology developing the most sophisticated and "game changing" trainers the US Navy deploys. You will be constantly learning new skills and be encouraged and supported to develop the career you want to achieve. The hallmark of Leidos is empowered employees doing meaningful work. Join Leidos for a career, not just a job. Leidos is seeking an energetic, motivated, self-starter for this technically sophisticated and challenging engineering position, developing a variety of naval training and simulation systems such as CIAT - Combined Integrated Air and Missile Defense (IAMD) and Anti-Submarine Warfare (ASW) Trainer - YouTube . You will serve as an integral part of a development team that is focused on building and maintaining state-of-the-art Simulation Systems for our US Navy customers. You will administer DevSecOps and Configuration Management (CM) practices, tools and techniques for the use by the team, to increase our ability to deliver trainers more quickly and with improved quality. You will be responsible for setting up cloud environments to be used by development teams for continuous integration and development of Navy systems in both the public cloud and on-premises in private clouds. You will work directly with the management team to help standardize these same practices across our entire development group and demonstrate the effectiveness and value of modern DevSecOps and CM to our Navy customers. Come join us as a front-line leader who can help to shape the future of our team and our incredible products!

Remote/Telework: This position allows at least 75% remote work. Candidate must be local to the office and able to work onsite as needed to accomplish required tasks for the role.

Core Responsibilities

Kubernetes and Containers

• Design, deploy, and maintain Kubernetes-based platforms such as AWS EKS and RKE2.
• Deploy and manage containerized applications using Docker or Podman.
• Develop, maintain, and troubleshoot Helm charts and Kubernetes manifests.
• Configure and support Istio service mesh, Kubernetes networking, ingress, service discovery, configmaps, secrets, and workload security.

Infrastructure Automation

• Design, deploy, and maintain infrastructure using OpenTofu or Terraform.
• Develop Ansible automation for system configuration, software deployment, patching, and operational tasks.
• Build reusable infrastructure modules, automation roles, templates, and deployment patterns.
• Apply infrastructure-as-code principles, including version control, peer review, testing, and controlled promotion.
• Support infrastructure provisioning and configuration across development, test, and production environments.

CI/CD and Software Factory Operations

• Design, implement, and maintain secure CI/CD pipelines using GitLab and GitLab Runners, or Jenkins.
• Integrate automated build, test, security, packaging, and deployment stages.
• Install, configure, troubleshoot, and integrate GitLab, GitLab Runners, Jenkins, Keycloak, Red Hat Identity Management or LDAP, Artifactory, Mattermost, Jira, Confluence, and SonarQube.
• Establish secure Git workflows, including branching, merge requests, code reviews, tagging, releases, and change control.
• Create reusable pipeline templates and shared CI/CD components.

DevSecOps and Continuous Authorization

• Integrate security practices into all stages of the software development lifecycle.
• Implement automated static application security testing, software composition analysis, dependency scanning, container image scanning, infrastructure-as-code scanning, secrets detection, license compliance, and software quality gates.
• Support secure software supply chain practices, including artifact integrity, provenance, and traceability.
• Support cATO, continuous monitoring, and automated compliance evidence collection.
• Translate security and compliance requirements into technical controls, pipeline checks, and operational procedures.
• Support vulnerability remediation, patch management, configuration compliance, and security assessment activities.

Linux and Cloud Operations

• Administer and troubleshoot Red Hat Enterprise Linux (RHEL) or Rocky Linux systems.
• Troubleshoot processes, services, networking, DNS, storage, permissions, package management, logging, and system performance.
• Apply system hardening and operational security practices.
• Design, deploy, and maintain cloud infrastructure in Amazon Web Services (AWS).
• Support cloud networking, identity and access management, compute, storage, monitoring, and security services.
• Develop procedures for backup, recovery, upgrades, patching, and incident response.

Collaboration and Technical Leadership

• Collaborate with developers, cybersecurity engineers, system administrators, cloud engineers, and technical leadership.
• Lead troubleshooting for complex platform, pipeline, networking, authentication, and deployment issues.
• Participate in architecture reviews, design sessions, code reviews, incident response, and root-cause analysis.
• Establish reusable engineering standards and operational practices.
• Mentor junior DevSecOps engineers and provide technical guidance.
• Maintain technical documentation, diagrams, runbooks, and standard operating procedures.

Required Education

Bachelor’s Degree in Electrical Engineering, Computer Engineering or Computer Science, Math or the Sciences, Network Engineering, Systems Software, Information Technology, or a related technical degree.

Required Experience

You must have U.S. Citizenship and be eligible to obtain a U.S. Government granted security clearance. Employment is contingent upon receiving an interim Secret security clearance. You must have 5+ years of experience in DevSecOps, platform engineering, systems engineering, cloud engineering, software engineering, or a related field. You must have professional experience with Kubernetes, Git, Istio or similar K8s service mesh, Helm charts, Ansible, OpenTofu or Terraform, and Docker or Podman. You must have experience administering and troubleshooting Linux systems, particularly RHEL or Rocky Linux. You must have experience designing, deploying, securing, or operating infrastructure in AWS. You must have experience administering, integrating, or troubleshooting multiple software factory applications listed in this description (e.g. GitLab, Artifactory, etc.). Practical experience with Git workflows, CI/CD pipelines, infrastructure as code (IaC), container delivery, automated security testing, vulnerability management, continuous monitoring, and cATO. Experience writing automation using Bash, Python, etc. You must be able to diagnose complex technical problems across multiple infrastructure and application layers. You must be able to communicate technical concepts clearly and produce high-quality documentation. You must currently hold or be able to obtain certifications for Security+, entry-level Linux such as Linux+ or LPI Linux Essentials, and entry-level AWS such as AWS Cloud Practitioner.

Desired Experience

Certifications for Kubernetes, Network+, or CCNA. Operating RKE2 Kubernetes clusters and software factories in air-gapped, disconnected, or highly restricted environments. Monitoring tools such as Grafana, Prometheus, and Loki. Security tools such as Falco, AWS GuardDuty and Inspector. UDS CLI and UDS packages. Zarf for packaging, deploying, and managing applications in disconnected or air-gapped environments. Zero-trust architecture, software bills of materials, artifact signing, image signing, provenance, or supply chain verification. Deploying, securing, or maintaining AI and large language model platforms. Policy as code, automated compliance enforcement, and observability platforms. Supporting regulated, defense, classified, healthcare, financial, or other highly controlled environments. Atlassian Software Development and Collaboration products (Jira, Confluence).

If you’re looking for comfort, keep scrolling.

At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it.

We’re not hiring followers. We’re recruiting the ones who disrupt, provoke, and refuse to fail.

Step 10 is ancient history. We’re already at step 30 - and moving faster than anyone else dares.

Pay Range: Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary.

Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026.

For more information, visit www.Leidos.com.

Pay and Benefits Pay and benefits are fundamental to any career decision. That’s why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.