Senior Cloud Platform and DevSecOps Engineer - TS/SCI with Polygraph

General Dynamics Information Technology; Chantilly (VA); On-site; USD 149,000 - 201,000; Full time

Benefits offered by this job

Comprehensive benefits

401K with company match

Paid time off

Job summary

General Dynamics Information Technology, Inc. seeks a Senior Cloud Architect/DevSecOps to design and implement Azure platform services, landing zones, and secure automation for production workloads.

You will build IaC modules, pipelines, and supply-chain controls to enable scalable, compliant cloud operations. The role requires 8+ years in cloud/platform engineering, strong Linux/Windows admin skills, and TS/SCI with Polygraph clearance.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Information Technology, or related STEM field, or approved equivalent experience.
• Active TS/SCI with Polygraph
• Onsite location
• 8+ years of cloud/platform/DevSecOps experience, incl. 3+ years delivering production platform automation.
• Hands-on Azure or Azure Government experience with networking, compute, storage, identity integration, policy, monitoring, and secure configuration.
• Strong IaC experience with Terraform, Bicep/ARM, Ansible, or equivalent, incl. module design, state/change management, testing, and peer-reviewed promotion.
• Experience building/operating CI/CD and artifact/container services inside enterprise or disconnected boundaries using GitLab, Jenkins, Nexus/Artifactory, Harbor, Kubernetes/OpenShift, or comparable platforms.
• Strong Linux and Windows administration fundamentals plus Python, PowerShell, Bash, or other automation language.
• Experience with container hardening, image/dependency scanning, SBOMs, secrets management, certificate handling, and rollback/recovery.
• Working knowledge of RMF/STIG controls, change management, operational acceptance, logging/audit, and classified data-handling requirements.
• Demonstrated ability to lead technical work, review others' code/designs, communicate risk early, and operate calmly during production issues.

Responsibilities

• Implement Azure platform services, landing-zone components, network integration, policy, logging, identity hooks, key/secrets management, and workload hosting patterns under the Principal Cloud Architect's direction.
• Develop and maintain version-controlled IaC modules using Terraform, Bicep/ARM, Ansible, or approved equivalents; enforce peer review, testing, and release discipline.
• Build and operate internal GitLab/Jenkins or equivalent pipelines, container platforms, registries, package repositories, image repositories, and artifact mirrors for disconnected delivery.
• Implement software supply-chain controls including SBOM generation, dependency and image scanning, signing, provenance, allowlists, and promotion gates.
• Develop hardened container images, deployment templates, configuration standards, and environment-specific overlays for applications, data services, and AI inference workloads.
• Automate platform provisioning, patching, backup, recovery, certificate/secret rotation, compliance checks, and routine operations.
• Integrate platform telemetry with Azure Monitor, Sentinel, Dynatrace, ServiceNow, and the enterprise observability architecture.
• Partner with Security and RMF staff to implement controls and produce reusable evidence from code, pipeline, scan, and configuration outputs.
• Troubleshoot complex platform failures, lead technical recovery when assigned, document root causes, and convert lessons into platform improvements.
• Mentor engineers, conduct code/design reviews, and help domain teams adopt approved platform patterns rather than building shadow infrastructure.

Skills

DevSecOps

Linux

Microsoft Azure

Microsoft Windows

Systems Engineering

Education

Bachelor's degree in CS / IT / Software Eng

Tools

Terraform

Bicep/ARM

Ansible

GitLab/Jenkins

Nexus/Artifactory

Harbor

Kubernetes/OpenShift

Job description

Req ID: RQ231586

Type of Requisition: Regular

Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph

Public Trust/Other Required: None

Job Family: IT Infrastructure and Operations

Skills

DevSecOps,Linux,Microsoft Azure,Microsoft Windows,Systems Engineering

Experience

8 + years of related experience

US Citizenship Required

Yes

Job Description

Key Responsibilities

• Implement Azure platform services, landing-zone components, network integration, policy, logging, identity hooks, key/secrets management, and workload hosting patterns under the Principal Cloud Architect's direction.

• Develop and maintain version-controlled IaC modules using Terraform, Bicep/ARM, Ansible, or approved equivalents; enforce peer review, testing, and release discipline.

• Build and operate internal GitLab/Jenkins or equivalent pipelines, container platforms, registries, package repositories, image repositories, and artifact mirrors for disconnected delivery.

• Implement software supply-chain controls including SBOM generation, dependency and image scanning, signing, provenance, allowlists, and promotion gates.

• Develop hardened container images, deployment templates, configuration standards, and environment-specific overlays for applications, data services, and AI inference workloads.

• Automate platform provisioning, patching, backup, recovery, certificate/secret rotation, compliance checks, and routine operations.

• Integrate platform telemetry with Azure Monitor, Sentinel, Dynatrace, ServiceNow, and the enterprise observability architecture.

• Partner with Security and RMF staff to implement controls and produce reusable evidence from code, pipeline, scan, and configuration outputs.

• Troubleshoot complex platform failures, lead technical recovery when assigned, document root causes, and convert lessons into platform improvements.

• Mentor engineers, conduct code/design reviews, and help domain teams adopt approved platform patterns rather than building shadow infrastructure.

Required Qualifications

• Education: Bachelor's degree in Computer Science, Software Engineering, Information Technology, or related STEM field, or approved equivalent experience.

• Clearance: Active TS/SCI with Polygraph

• Location: Onsite

• 8+ years of cloud, platform, systems, or DevSecOps engineering experience, including 3+ years delivering production platform automation.

• Hands-on Azure or Azure Government experience with networking, compute, storage, identity integration, policy, monitoring, and secure configuration.

• Strong IaC experience with Terraform, Bicep/ARM, Ansible, or equivalent, including module design, state/change management, testing, and peer-reviewed promotion.

• Experience building or operating CI/CD and artifact/container services inside enterprise or disconnected boundaries using GitLab, Jenkins, Nexus/Artifactory, Harbor, Kubernetes/OpenShift, or comparable platforms.

• Strong Linux and Windows administration fundamentals plus proficiency in Python, PowerShell, Bash, or another automation language.

• Experience with container hardening, image/dependency scanning, SBOMs, secrets management, certificate handling, and rollback/recovery.

• Working knowledge of RMF/STIG controls, change management, operational acceptance, logging/audit, and classified data-handling requirements.

• Demonstrated ability to lead technical work, review others' code/designs, communicate risk early, and operate calmly during production issues.

Preferred Qualifications

• Azure/IaC lane: Azure Administrator Associate or DevOps Engineer Expert and relevant Terraform certification.

• Experience supporting GPU/AI platforms, ML model artifacts, offline Python wheelhouses, or local inference services.

• Experience integrating ServiceNow change/CMDB records with pipeline and deployment events.

• Experience with policy-as-code, compliance-as-code, infrastructure testing, chaos/resilience testing, or FinOps automation.

GDIT IS YOUR PLACE

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities

• Support: An internal mobility team focused on helping you achieve your career goals

• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off

• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY Explore an enterprise IT career at GDIT and you'll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.

#GDITcareers #OpportunityOwned

#WeAreGDIT #transitioningmilitary

#clearedjobs #veterans #Autobots

#IntelligenceEngineered

The likely salary range for this position is $148,750 - $201,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Total Rewards at GDIT

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.

Join our Talent Community to stay up to date on our career opportunities and events at https://gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans