DevSecOps Lead Engineer

CACI International Inc.; Stafford (VA); On-site; USD 82,000 - 172,000; Full time

Job summary

CACI International Inc. seeks a DevSecOps Lead Engineer to own health, security, and state of our AWS cloud. Lead a small team, guide IaC, Kubernetes, CI/CD, and secure software delivery end-to-end.

You will design and operate Kubernetes clusters, manage AWS state, and build GitLab pipelines with ArgoCD. Strong Python tooling and AI tooling awareness help shape secure, scalable engineering practices.

Qualifications

• 7+ years in DevOps/DevSecOps, cloud infrastructure, or SRE roles.
• Deep, hands-on AWS expertise (compute, networking, IAM, storage) at production scale.
• Strong proficiency with Terraform, Kubernetes, and Helm in production.
• Proficiency in Python for automation and tooling.
• Experience building and maintaining GitLab CI/CD pipelines.
• Hands-on experience with ArgoCD or comparable GitOps tooling.
• Working knowledge of LLM/AI concepts to guide decisions involving AI tooling.
• Demonstrated ability to operate as the senior/primary technical resource for a small team.
• U.S. citizenship and eligibility to obtain/maintain a Top Secret clearance.

Responsibilities

• Design, operate, and troubleshoot Kubernetes clusters and Helm-packaged workloads in production.
• Own and manage AWS environment state end-to-end; provisioning, configuration, drift detection, cost, and security posture.
• Build and maintain GitLab CI/CD pipelines and operate ArgoCD for GitOps-based deployment.
• Write and maintain Python tooling for infrastructure and operational workflows.
• Mentor team members on IaC, Kubernetes, and CI/CD best practices.
• Embed security throughout the development and delivery lifecycle; secrets management and least-privilege IAM.

Skills

AWS expertise

DevSecOps experience

Python automation

GitLab CI/CD

ArgoCD

LLM/AI concepts

Security best practices

Leadership

Tools

Terraform

Kubernetes

Helm

Python

GitLab CI/CD

ArgoCD

Job description

Job Title: DevSecOps Lead EngineerJob Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: NoneEmployee Type: RegularPercentage of Travel Required: Up to 10%Type of Travel: Local* * *The Opportunity:We're looking for a DevSecOps Lead Engineer to own the health, security, and ongoing state of our AWS cloud environment. This is a hands-on technical leadership role. You'll be the go-to engineer for a small team and the primary technical point of contact for the program on infrastructure, automation, and secure software delivery.Responsibilities:Design, operate, and troubleshoot Kubernetes clusters and Helm-packaged workloads in productionOwn and manage AWS environment state end-to-end; provisioning, configuration, drift detection, cost, and security posture.This includes infrastructure fully defined and version-controlled in TerraformBuild and maintain GitLab CI/CD pipelines and operate ArgoCD for GitOps-based continuous deploymentWrite and maintain Python tooling and automation for infrastructure and operational workflowsServe as the senior technical escalation point for the team and the broader program on infrastructure, DevOps, and security questionEmbed security throughout the development and delivery lifecycle; secrets management, least-privilege IAM, vulnerability scanning, policy-as-code, compliance controlsAdvise on integrating LLM/AI-based tooling and workflows into engineering practices where it adds valueMentor team members on infrastructure-as-code, Kubernetes, and CI/CD best practicesQualifications:Required:• 7+ years in DevOps/DevSecOps, cloud infrastructure, or SRE roles• Deep, hands-on AWS expertise (compute, networking, IAM, storage) at production scale• Strong proficiency with Terraform, Kubernetes, and Helm in production• Proficiency in Python for automation and tooling• Experience building and maintaining GitLab CI/CD pipelines• Hands-on experience with ArgoCD or comparable GitOps tooling• Working knowledge of LLM/AI concepts (model deployment, prompting, RAG, cost/latency trade-offs) sufficient to guide engineering decisions involving AI tooling• Demonstrated ability to operate as the senior/primary technical resource for a small team• U.S. citizenship and eligibility to obtain/maintain a Top Secret clearanceDesired:• AWS Certified Solutions Architect/DevOps Engineer, CKA/CKAD, or HashiCorp Terraform Associate• Prior experience on federal/government cloud programs• Familiarity with compliance frameworks (NIST 800-53, FedRAMP, etc.)• Experience integrating LLM-based tooling into CI/CD or engineering workflows-What You Can Expect: A culture of integrity.At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.An environment of trust.CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.A focus on continuous growth.Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.Pay Range :There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.Since this position can be worked in more than one location, the range shown is the national average for the position.The proposed salary range for this position is:$82,100-$172,400CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.