Mid-Level DevSecOps Engineer

Leidos; Huntsville (AL); On-site; USD 69,550 - 125,725; Full time

Job summary

Leidos is seeking a DevSecOps Engineer to design, implement, and continuously improve secure pipelines across the organization. You will integrate security controls into CI/CD, enforce SDLC standards, and collaborate with software, cybersecurity, and integration teams to embed security in all development phases.

The role emphasizes IaC adoption, containerization with Docker, secrets management, and zero-trust models, while aligning with NIST/RMF frameworks.

Qualifications

• BS/MS degree with security-focused experience.
• 1+ years in software engineering, DevOps, or DevSecOps roles.
• On-site work only, no remote/hybrid.
• Ability to obtain and maintain a Security+ certification.
• Hands-on experience designing and implementing CI/CD pipelines (Jenkins, GitLab CI/CD, GitHub Actions, etc.).
• Proficiency in containerization and orchestration (Docker, Kubernetes).
• Strong scripting and automation skills (Python, Bash, PowerShell).
• Excellent problem-solving skills and ability to operate in fast-paced, mission-critical environments.
• Strong Linux operating systems knowledge, including administration, troubleshooting, and performance tuning.
• Strong collaboration and written communication skills.
• U.S. citizen with ability to obtain and maintain a Final Secret clearance.
• Resident of Huntsville, AL, or willing to relocate to Huntsville, AL.

Responsibilities

• Design and improve DevSecOps pipelines.
• Integrate security controls into CI/CD pipelines (SAST, DAST, SCA, container scanning).
• Establish secure SDLC standards and practices.
• Collaborate with software, cybersecurity, and integration teams to embed security.
• Drive adoption of IaC and immutable infrastructure principles.
• Oversee containerization and orchestration strategies using Docker.
• Implement and manage secrets management, IAM, and zero-trust security models.
• Ensure compliance with security frameworks (NIST, RMF).
• Mentor engineers on DevSecOps and automation strategies.
• Evaluate and integrate new tools to improve security, automation, and delivery speed.
• Partner with leadership to define DevSecOps strategy, roadmap, and metrics.
• Support audit and accreditation activities with documentation and evidence.
• Drive culture of shared responsibility for security, reliability, and performance.

Skills

CI/CD pipelines design

Automation scripting

Linux administration

Collaboration

Security mindset

Problem solving

Clear communication

Education

BS in Computer Science or related field

MS in related field

Tools

Docker

Kubernetes

Jenkins

GitLab CI/CD

GitHub Actions

Job description

Primary Responsibilities

• Design, implement, and continuously improve DevSecOps pipelines and practices across the organization.
• Integrate security controls and automated testing into CI/CD pipelines (SAST, DAST, SCA, container scanning).
• Establish and enforce secure software development lifecycle (SDLC) standards and best practices.
• Collaborate with software engineering, cybersecurity, and integration teams to embed security into all phases of development.
• Drive adoption of Infrastructure as Code (IaC) and immutable infrastructure principles.
• Oversee containerization and orchestration strategies using Docker.
• Implement and manage secrets management, IAM, and zero‑trust security models.
• Ensure compliance with applicable security frameworks and standards (e.g., NIST, RMF).
• Mentor and guide engineers on DevSecOps principles, secure coding practices, and automation strategies.
• Evaluate, select, and integrate new tools and technologies to improve security, automation, and delivery speed.
• Partner with leadership to define DevSecOps strategy, roadmap, and metrics for success.
• Support audit and accreditation activities, including documentation and evidence collection.
• Drive a culture of shared responsibility for security, reliability, and performance.

Basic Qualifications

• BS in computer science or related field with 2‑4 years of relevant experience, or MS with 1‑2 years of experience.
• 1+ years in software engineering, DevOps, or DevSecOps roles.
• On‑site work only, no remote/hybrid.
• Ability to obtain and maintain a Security+ certification.
• Hands‑on experience designing and implementing CI/CD pipelines (Jenkins, GitLab CI/CD, GitHub Actions, etc.).
• Proficiency in containerization and orchestration (Docker, Kubernetes).
• Strong scripting and automation skills (Python, Bash, PowerShell).
• Excellent problem‑solving skills and ability to operate in fast‑paced, mission‑critical environments.
• Strong Linux operating systems knowledge, including administration, troubleshooting, and performance tuning.
• Strong collaboration and written communication skills.
• U.S. citizen with ability to obtain and maintain a Final Secret clearance.
• Resident of Huntsville, AL, or willing to relocate to Huntsville, AL.

Preferred Qualifications

• IAT Level II or Linux OS based certification.
• Experience integrating security practices into the SDLC (SAST, DAST, dependency scanning, container security).
• Experience with IaC tools (Terraform, CloudFormation, Pulumi).
• Strong knowledge of security frameworks and compliance standards (NIST, RMF, SCAP, STIGs).
• Experience implementing IAM, secrets management, and zero‑trust architectures.
• Experience working in Agile/Scrum environments and collaborating with cross‑functional teams.

Pay Range

$69,550.00 - $125,725.00

Benefits

Competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider applicants with criminal histories consistent with relevant laws.