DevSecOps Engineer - Intelligent Platforms & Agents

Leidos Inc; Reston (VA); On-site; USD 151,000 - 195,000; Full time

Job summary

Leidos is seeking a DevSecOps Engineer to build and sustain delivery infrastructure for mission-critical software, ensuring speed and compliance. You will automate CI/CD, harden Kubernetes, and implement security controls across DoD environments.

You will contribute to feature development with a security-first mindset and collaborate with engineers, ISSEs, and security teams. Expect a dynamic, mission-driven team and on-site work in Reston, VA.

Qualifications

• Must have and maintain a Secret security clearance.
• BS degree and 4+ years of professional DevSecOps or DevOps experience, 8+ years total relevant experience.
• Hands-on experience designing and maintaining CI/CD pipelines using GitLab CI; experience with additional pipeline tools a plus.
• Experience with Kubernetes administration and hardening in DoD or compliance-driven environments – RKE2 or K3S experience strongly preferred.
• Experience implementing DISA STIG compliance in containerized and Linux environments (RHEL or Rocky Linux).
• Proficiency with Infrastructure as Code tooling, particularly Terraform.
• Experience with Helm chart authoring and Kubernetes deployment management.
• Experience with automated security scanning, SBOM generation, and CVE triage and remediation.
• Scripting proficiency in Python or Bash for pipeline and operational automation.
• Demonstrated use of AI tooling to accelerate engineering workflows.
• Background contributing to application feature development alongside infrastructure work.
• Ability to operate independently and manage workload across competing priorities in a small, fast-moving team.

Responsibilities

• Design, implement, and maintain automated CI/CD pipelines that move code from development through security scanning, compliance validation, and deployment into Navy and DoD environments.
• Build and maintain hardened Kubernetes environments aligned to DISA STIG requirements across cloud and restricted network contexts.
• Automate security artifact generation including SBOM production, CVE scanning, and continuous compliance validation.
• Drive adoption of Infrastructure as Code, GitOps practices, and controls-as-code across the team.
• Leverage AI tooling to accelerate pipeline development, vulnerability triage, compliance remediation, and operational documentation.
• Partner with software and systems engineers and ISSEs to embed security and compliance from the start of development.
• Maintain deployment infrastructure across multiple secure environments including cloud and air-gapped contexts.
• Support ATO processes through automated evidence generation, documentation as code, and collaboration with security.
• Establish and promote standards for pipeline design, container security, secrets management, and deployment consistency.
• Contribute to feature development when needed, applying security-first development practices to application code.
• Maintain runbooks, deployment guides, and architecture diagrams as version-controlled artifacts.

Skills

Secret clearance

CI/CD pipelines

Kubernetes admin

DISA STIG compliance

Terraform

GitLab CI

SBOM & CVE

Python/Bash scripting

AI tooling

Security-first development

Education

Bachelor's degree in a relevant field

Tools

GitLab CI

Kubernetes

Terraform

Helm

Job description

Description

Position Overview

At Leidos, we are advancing mission-critical platforms that simulate, interact with, and act on complex technical and business environments. These platforms enable teams to engage with network operations, automate business processes, and gain insight through intent-driven and agent-based systems.

The team operates with a strong belief in \"everything as code,\" using version-controlled artifacts and automation to manage not only infrastructure and software, but also deployment pipelines, security controls, compliance artifacts, and operational workflows.

The DevSecOps Engineer is a hands-on practitioner responsible for building, automating, and sustaining the delivery infrastructure that enables mission-critical software to move fast without compromising compliance. You will actively build and maintain CI/CD pipelines, harden and manage Kubernetes environments, automate security compliance, and leverage AI as a force multiplier across the entire delivery lifecycle. When team capacity demands it, you will contribute directly to feature development - bringing a security-first perspective to application code.

Primary Responsibilities

• Design, implement, and maintain automated CI/CD pipelines that carry code from development through security scanning, compliance validation, and deployment into Navy and DoD environments


• Build and maintain hardened Kubernetes environments aligned to DISA STIG requirements across cloud and restricted network deployment contexts


• Automate security artifact generation including SBOM production, CVE scanning, and continuous compliance validation


• Drive adoption of Infrastructure as Code, GitOps practices, and controls-as-code across the team


• Leverage AI tooling to accelerate pipeline development, vulnerability triage, compliance remediation, and operational documentation


• Partner closely with software engineers, systems engineers, and ISSEs to embed security and compliance requirements from the start of development


• Maintain and evolve deployment infrastructure across multiple secure environments, including cloud and air-gapped or intermittently connected contexts


• Support ATO processes through automated evidence generation, documentation as code, and direct collaboration with the security team


• Establish and promote standards for pipeline design, container security, secrets management, and deployment consistency


• Contribute to feature development when team capacity requires, applying security-first development practices to application code


• Maintain operational documentation including runbooks, deployment guides, and architecture diagrams as version-controlled artifacts

Required Skills and Experience

• Must have and maintain a Secret security clearance


• BS degree and 4+ years of professional DevSecOps or DevOps engineering experience, 8+ years of total relevant experience.


• Hands-on experience designing and maintaining CI/CD pipelines using GitLab CI; experience with additional pipeline tools a plus


• Experience with Kubernetes administration and hardening in DoD or compliance-driven environments – RKE2 or K3S experience strongly preferred


• Experience implementing DISA STIG compliance in containerized and Linux environments (RHEL or Rocky Linux)


• Proficiency with Infrastructure as Code tooling, particularly Terraform


• Experience with Helm chart authoring and Kubernetes deployment management


• Experience with automated security scanning, SBOM generation, and CVE triage and remediation


• Scripting proficiency in Python or Bash for pipeline and operational automation


• Demonstrated use of AI tooling to accelerate engineering workflows


• Background contributing to application feature development alongside infrastructure work


• Ability to operate independently and manage workload across competing priorities in a small, fast-moving team

Preferred Qualifications

• Experience operating in air-gapped or disconnected network environments


• Experience supporting ATO through automation, documentation, and technical leadership


• Active Security+ certification or equivalent IAT Level II certification


• Experience with secrets management tooling such as Vault, Sealed Secrets, or SOPS


• Familiarity with observability and monitoring tools such as Prometheus or Grafana


• Certified Kubernetes Administrator (CKA) or willingness to obtain upon onboarding


• Experience applying \"as code\" approaches beyond infrastructure (e.g., configuration-as-code, policy-as-code, workflows-as-code, documentation-as-code)

AppMod

SMIT

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting

September 24, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at .

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

#Remote