DevSecOps Engineer: Secure CI/CD & Cloud Automation

Leidos Inc

Alexandria (VA)

On-site

USD 87,000 - 157,000

Full time

5 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Leidos is seeking a Mid-Level DevSecOps Engineer for the Maru Program within the Geospatial Analyst Solutions Directorate to strengthen security across CI/CD pipelines, containerization, and cloud infrastructure.

The ideal candidate will implement secure deployment practices, collaborate with software engineers and security teams, and ensure compliant, scalable releases in both classified and unclassified environments.

Qualifications

US citizenship is required per contract.
Bachelor's degree in Computer Science, Engineering, or related discipline with 4-8 years of relevant experience; or Master's degree with 2-6 years of relevant experience.
Hands-on experience with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions.
Proficiency in scripting languages such as Python, Bash, or PowerShell.
Infrastructure as Code through Terraform, CloudFormation, or similar tools.
Experience with AWS, Azure, or similar cloud environments.
Hands-on experience deploying and managing AWS infrastructure using CDK.
Experience with Docker.
Build, maintain, and troubleshoot automated GitLab pipelines.
Experience integrating CDK, GitLab, Docker, and ECS for automated deployments.
Deploy, manage, and troubleshoot containerized applications using ECS.
Experience with Kubernetes, OpenShift, or similar platforms.
Working knowledge of secure coding practices, vulnerability management, and code scanning tools.

Responsibilities

Design, implement, and maintain secure CI/CD pipelines.
Support containerized environments using Docker and orchestration platforms such as Kubernetes or OpenShift.
Manage and monitor infrastructure using Terraform or CloudFormation.
Support secure provisioning, configuration, and monitoring of cloud environments (e.g., AWS, Azure).
Integrate security tools and best practices into development workflows, including static and dynamic code analysis.
Collaborate with engineering and security teams to harden environments and secure cloud-native architectures.
Diagnose and resolve issues related to builds, deployments, and system performance.
Conduct vulnerability assessments and assist in compliance activities aligned with RMF, STIGs, or related security frameworks.
Document configurations and contribute to continuous improvement of DevSecOps processes and tooling.