DevSecOps Engineer: GitLab CI/CD, Kubernetes, Cloud Security

Leidos

Arlington (VA)

On-site

USD 108,000 - 195,000

Full time

4 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Leidos’ Digital sector is seeking a Systems Engineer with strong DevSecOps, identity security, and systems‑integration expertise to support DISA CESO. This role focuses on the software delivery platform, GitLab administration, CI/CD architecture, deployment automation, and developer enablement.

100% on-site in Arlington, VA and requires TS with SCI eligibility for consideration, with potential poly in future.

Qualifications

Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Engineering, or related field with 8–12 years of relevant experience, or Master’s degree with 6–10 years of experience.
Active TS clearance with SCI eligibility.
Ability to obtain and maintain a CI Poly and Special Program Access.
IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
Extensive experience designing, implementing, and administering enterprise CI/CD platforms supporting large-scale software development.
Advanced experience developing and administering GitLab CI/CD pipelines, including GitLab Runners, reusable pipeline templates, variables, artifacts, deployment workflows, and pipeline optimization.
Extensive experience administering GitLab repositories, merge requests, branching strategies, permissions, source code management, and platform governance.
Extensive experience developing Infrastructure as Code using Terraform, AWS CloudFormation, or similar technologies.
Advanced experience deploying containerized applications (Docker, Kubernetes) using Helm, GitOps methodologies, or comparable deployment tools.
Strong experience developing automation using Bash, Python, or similar scripting languages.
Experience administering Linux environments supporting CI/CD platforms and software development workflows.
Experience supporting AWS cloud services and cloud-native application deployments.
Extensive knowledge of software supply chain security, secrets management, dependency management, secure software development practices, and automated security testing.
Experience integrating automated testing, quality gates, compliance validation, and security scanning into enterprise CI/CD pipelines.
Demonstrated ability to contribute to technical initiatives, apply engineering standards, and improve software delivery practices.
Strong troubleshooting, communication, collaboration, and problem-solving skills.
Ability to obtain an SF-85 Public Trust suitability determination.
US Citizenship.

Responsibilities

Engineer, administer, and continuously improve the GitLab platform, including projects, groups, runners, repositories, permissions, scalability, and operational health.
Develop and maintain reusable GitLab pipeline templates, shared libraries, automation frameworks, and deployment workflows that support enterprise CI/CD standards and improve consistency, maintainability, and engineering productivity across Agile development teams.
Implement and continuously improve automated application security, software supply chain security, and compliance validation throughout the CI/CD lifecycle, including SAST, software composition analysis (SCA), container image scanning, secrets detection, and Infrastructure-as-Code scanning.
Develop and maintain standardized deployment patterns for Kubernetes applications utilizing GitOps methodologies, Helm, progressive deployment techniques, and automated deployment validation.
Administer GitLab Container Registry, package repositories, artifact repositories, and software dependency management platforms supporting secure software delivery.
Collaborate with Cloud Systems Owners to ensure cloud platforms effectively support automated software deployment, operational scalability, application resiliency, and platform reliability.
Partner with software development teams to improve build performance, deployment reliability, release quality, and developer productivity through automation and self‑service engineering capabilities.
Partner with cybersecurity teams to align DevSecOps capabilities with organizational security policies, Federal guidance, and continuous monitoring requirements.
Troubleshoot and perform root cause analysis for complex build failures, deployment issues, pipeline performance problems, dependency management challenges, and software delivery failures.
Participate in peer reviews of pipeline designs, deployment strategies, and automation solutions to promote consistency, maintainability, and adherence to established standards.
Monitor and report on software delivery performance metrics, including pipeline reliability, deployment success rates, build performance, and deployment frequency, identifying opportunities to improve engineering productivity and operational excellence.
Contribute to DevSecOps engineering standards, pipeline documentation, release management processes, operational guidance, and platform governance documentation.
Evaluate emerging DevSecOps technologies, AI‑assisted software engineering capabilities, software delivery methodologies, and automation techniques, recommending improvements that increase engineering productivity, security, and operational efficiency.
Participate in Agile ceremonies while supporting multiple software development teams.