DevSecOps Engineer, Senior

CACI International Inc; National Harbor (MD); Hybrid; USD 113,000 - 238,000; Full time

Job summary

CAC I International Inc. is seeking a Senior DevSecOps Engineer to secure AI-enabled applications and oversee secure CI/CD pipelines across cloud environments.

The role collaborates with AI engineers, cybersecurity, and cloud teams to embed security in the software development lifecycle and automate deployments. The position supports a hybrid work schedule (2–3 days on site) with a focus on secure infrastructure, IAM, secrets management, encryption, and compliance evidence collection.

Qualifications

• Bachelor’s degree + 7 years of experience in AI, ML, software engineering, or related field; equivalencies considered.
• Ability to obtain Public Trust clearance.
• At least five years of experience in DevSecOps, cloud engineering, software development, cybersecurity engineering, or related field.
• Experience building or maintaining CI/CD pipelines and automating software build, test, and deployment processes.
• Experience with infrastructure as code, such as Terraform, Bicep, or CloudFormation.
• Experience with cloud security controls, including identity and access management, secrets management, encryption, and network security.
• Experience integrating automated security testing into software delivery workflows, including vulnerability, dependency, and container scanning.
• Experience with source control and pipeline platforms such as GitHub Actions, Azure DevOps, or GitLab CI/CD.
• Familiarity with containers and container security, including Docker and Kubernetes.
• Understanding of secure software development practices and common application security risks.
• Ability to collaborate with developers, cybersecurity staff, cloud teams, and technical stakeholders to resolve security and deployment issues.

Responsibilities

• Build, maintain, and improve CI/CD pipelines for AI and software applications.
• Integrate security checks into development and deployment workflows, including code, dependency, container, and infrastructure scanning.
• Automate infrastructure provisioning and configuration using infrastructure as code.
• Implement secure deployment patterns for cloud-hosted applications, APIs, containers, and AI services.
• Apply security controls for identity and access management, secrets, encryption, network boundaries, and least-privilege access.
• Work with AI engineers to protect prompts, model endpoints, retrieval pipelines, training or reference data, and connected tools from unauthorized access or exposure.
• Support containerization and orchestration using technologies such as Docker and Kubernetes, where applicable.
• Establish and maintain artifact management, configuration management, release controls, and deployment documentation.
• Identify vulnerabilities and misconfigurations; coordinate remediation with engineering and cybersecurity teams.
• Support security assessments, authorization activities, audits, and compliance evidence collection.
• Monitor pipeline and deployment issues, troubleshoot failures, and improve automation and developer workflows.
• Document DevSecOps processes, security controls, pipeline configurations, and operational procedures.
• Contribute reusable components, technical documentation, and engineering practices that improve consistency and maintainability.

Skills

CI/CD pipelines

Security testing

Infrastructure as code

Cloud engineering

DevSecOps

Collaboration

Education

Bachelor’s degree + 7 years

Tools

Terraform

Bicep

CloudFormation

GitHub Actions

Azure DevOps

GitLab CI/CD

Docker

Kubernetes

Job description

Job Title: DevSecOps Engineer, Senior

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: None

Employee Type: Regular

Percentage of Travel Required: None

Type of Travel: None

* * *

The Opportunity

We are seeking a DevSecOps Engineer to support the secure development, integration, deployment, and maintenance of AI-enabled applications and services to support the United States Secret Service (USSS) contract supporting the Department of Homeland Security. The engineer will embed security practices throughout the software development lifecycle and help the team deliver repeatable, automated deployment processes for cloud-based AI solutions.

Working with AI engineers, software developers, cybersecurity, cloud, and operations teams, the DevSecOps Engineer will build and maintain CI/CD pipelines, automate security testing, and implement secure infrastructure and deployment patterns. The role will help ensure that application code, cloud resources, containers, APIs, and AI-related data flows meet enterprise security requirements while enabling the team to deliver updates efficiently.

Hybrid work schedule 2-3 days on site.

Responsibilities

• Build, maintain, and improve CI/CD pipelines for AI and software applications.
• Integrate security checks into development and deployment workflows, including code, dependency, container, and infrastructure scanning.
• Automate infrastructure provisioning and configuration using infrastructure as code.
• Implement secure deployment patterns for cloud-hosted applications, APIs, containers, and AI services.
• Apply security controls for identity and access management, secrets, encryption, network boundaries, and least-privilege access.
• Work with AI engineers to protect prompts, model endpoints, retrieval pipelines, training or reference data, and connected tools from unauthorized access or exposure.
• Support containerization and orchestration using technologies such as Docker and Kubernetes, where applicable.
• Establish and maintain artifact management, configuration management, release controls, and deployment documentation.
• Identify vulnerabilities and misconfigurations; coordinate remediation with engineering and cybersecurity teams.
• Support security assessments, authorization activities, audits, and compliance evidence collection.
• Monitor pipeline and deployment issues, troubleshoot failures, and improve automation and developer workflows.
• Document DevSecOps processes, security controls, pipeline configurations, and operational procedures.
• Contribute reusable components, technical documentation, and engineering practices that improve consistency and maintainability.

Qualifications

Required:

• Bachelor’s degree + 7 years of experience in artificial intelligence, machine learning, software engineering, or related field; equivalencies considered (Master’s + 7 years; 16 years with no degree; AA + 12 years)
• Ability to obtain Public Trust clearance.
• At least five years of experience in DevSecOps, cloud engineering, software development, cybersecurity engineering, or a related field.
• Demonstrated experience building or maintaining CI/CD pipelines and automating software build, test, and deployment processes.
• Experience with infrastructure as code, such as Terraform, Bicep, or CloudFormation.
• Experience with cloud security controls, including identity and access management, secrets management, encryption, and network security.
• Experience integrating automated security testing into software delivery workflows, including vulnerability, dependency, and container scanning.
• Experience with source control and pipeline platforms such as GitHub Actions, Azure DevOps, or GitLab CI/CD.
• Familiarity with containers and container security, including Docker and Kubernetes.
• Understanding of secure software development practices and common application security risks.
• Ability to collaborate with developers, cybersecurity staff, cloud teams, and technical stakeholders to resolve security and deployment issues.

Desired:

• Experience supporting AI, machine learning, or generative AI applications in a cloud environment.
• Experience securing Azure services, including Azure OpenAI or other Azure AI services.
• Experience with Terraform and reusable infrastructure modules for cloud environments.
• Familiarity with FedRAMP, FISMA, NIST security controls, or federal authorization processes.
• Experience generating compliance evidence and automating security control assessments.
• Experience with policy as code, configuration compliance, and automated cloud security posture management.
• Experience securing APIs, model endpoints, data pipelines, and integrations with enterprise systems.
• Relevant cloud, cybersecurity, or DevSecOps certifications.

What You Can Expect

A culture of integrity

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$113,200 - $237,800

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any otherprotectedcharacteristic.