Remote DevSecOps Engineer: CI/CD, Kubernetes, Security

Leidos Inc; Reston (VA); On-site; USD 151,000 - 195,000; Full time

Job summary

Leidos is seeking a DevSecOps Engineer to build and sustain delivery infrastructure for mission-critical software, ensuring speed and compliance. You will automate CI/CD, harden Kubernetes, and implement security controls across DoD environments.

You will contribute to feature development with a security-first mindset and collaborate with engineers, ISSEs, and security teams. Expect a dynamic, mission-driven team and on-site work in Reston, VA.

Qualifications

• Must have and maintain a Secret security clearance.
• BS degree and 4+ years of professional DevSecOps or DevOps experience, 8+ years total relevant experience.
• Hands-on experience designing and maintaining CI/CD pipelines using GitLab CI; experience with additional pipeline tools a plus.
• Experience with Kubernetes administration and hardening in DoD or compliance-driven environments – RKE2 or K3S experience strongly preferred.
• Experience implementing DISA STIG compliance in containerized and Linux environments (RHEL or Rocky Linux).
• Proficiency with Infrastructure as Code tooling, particularly Terraform.
• Experience with Helm chart authoring and Kubernetes deployment management.
• Experience with automated security scanning, SBOM generation, and CVE triage and remediation.
• Scripting proficiency in Python or Bash for pipeline and operational automation.
• Demonstrated use of AI tooling to accelerate engineering workflows.
• Background contributing to application feature development alongside infrastructure work.
• Ability to operate independently and manage workload across competing priorities in a small, fast-moving team.

Responsibilities

• Design, implement, and maintain automated CI/CD pipelines that move code from development through security scanning, compliance validation, and deployment into Navy and DoD environments.
• Build and maintain hardened Kubernetes environments aligned to DISA STIG requirements across cloud and restricted network contexts.
• Automate security artifact generation including SBOM production, CVE scanning, and continuous compliance validation.
• Drive adoption of Infrastructure as Code, GitOps practices, and controls-as-code across the team.
• Leverage AI tooling to accelerate pipeline development, vulnerability triage, compliance remediation, and operational documentation.
• Partner with software and systems engineers and ISSEs to embed security and compliance from the start of development.
• Maintain deployment infrastructure across multiple secure environments including cloud and air-gapped contexts.
• Support ATO processes through automated evidence generation, documentation as code, and collaboration with security.
• Establish and promote standards for pipeline design, container security, secrets management, and deployment consistency.
• Contribute to feature development when needed, applying security-first development practices to application code.
• Maintain runbooks, deployment guides, and architecture diagrams as version-controlled artifacts.

Skills

Secret clearance

CI/CD pipelines

Kubernetes admin

DISA STIG compliance

Terraform

GitLab CI

SBOM & CVE

Python/Bash scripting

AI tooling

Security-first development

Education

Bachelor's degree in a relevant field

Tools

GitLab CI

Kubernetes

Terraform

Helm

Job description

Leidos is seeking a DevSecOps Engineer to build and sustain delivery infrastructure for mission-critical software, ensuring speed and compliance. You will automate CI/CD, harden Kubernetes, and implement security controls across DoD environments.

You will contribute to feature development with a security-first mindset and collaborate with engineers, ISSEs, and security teams. Expect a dynamic, mission-driven team and on-site work in Reston, VA.