Senior DevOps CI/CD Engineer AWS (DevSecOps Champion)

General Dynamics Information Technology; Fairfax (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

General Dynamics Information Technology is seeking a Principal DevOps Engineer to lead secure CI/CD and DevSecOps practices for AWS-based solutions in support of mission-critical systems. You will design and govern pipelines, embed security, compliance, and risk management into the delivery lifecycle.

Collaborate with application development, cloud platform, cyber security, IT risk, and operations teams to ensure DevSecOps-readiness, build reusable templates, and mentor teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Cyber Security, or related field (or equivalent).
• Typically 8+ years of IT experience with strong DevSecOps/CI/CD in production.
• Hands-on with AWS services (EC2, S3, IAM, VPC, CloudWatch) in regulated environments.
• Experience designing and operating CI/CD pipelines on modern platforms.
• Strong IaC experience with CloudFormation and Terraform.
• Experience promoting signed builds into air-gapped, isolated environments.
• Security testing, vulnerability scanning, and compliance integration into CI/CD.
• Excellent communication and collaboration across cyber, risk, engineering, and program management.

Responsibilities

• Define and enforce secure CI/CD and DevSecOps standards for AWS-hosted apps.
• Design, build, and maintain CI/CD pipelines with security scanning and approvals.
• Lead IaC implementations with secure baselines for AWS environments.
• Automate secure environment provisioning and deployments across accounts.
• Implement monitoring and logging to support auditable delivery pipelines.
• Integrate IAM, encryption, secrets management, and vulnerability controls into workflows.
• Ensure pipelines comply with NIST/CMMC/FedRAMP/ISO standards and internal policies.
• Provide technical leadership and reusable secure pipeline templates.

Skills

CI/CD

DevSecOps

AWS

Security

IaC

Automation

Collaboration

Education

Bachelor’s degree in Computer Science, Information Systems, Engineering, Cyber Security, or related field

Tools

AWS CodePipeline/CodeBuild

Jenkins

GitLab CI

GitHub Actions

Azure DevOps

CloudFormation

Terraform

Job description

DEVOPS ENGINEER PRINCIPAL

GDIT is looking for a Engineer - AWS (DevSecOpsChampion) a senior technical rolesupporting DOJ Homeland Security Task Force (HSTF) / National Coordination Center (NCC).This role leads secure CI/CD andDevSecOpspractices for AWS-based solutions, designing and governing pipelines and automation that embed security, compliance, and risk management into the delivery lifecycle formission-criticalsystems.

Responsibilities

• Define and enforce secure CI/CD andDevSecOpsstandards, patterns, and guardrails for AWS-hosted applications, in alignment with GDIT Cyber Security Policy, Cyber Security Handbook, and Cloud/Security standards.

• Design, build, andmaintainCI/CD pipelines (e.g., AWSCodePipeline/CodeBuild, Jenkins, GitLab CI, GitHub Actions, Azure DevOps) with integrated security scanning, compliance checks, approvals, and testing.

• Leadinfrastructure-as-code(IaC) implementations (CloudFormation, Terraform) with embedded security and configuration baselines, supporting secure provisioning of AWS environments.

• Automate secure environment provisioning, configuration, and deployments across development, test, and production AWS accounts, in line with cyber and IT risk management requirements.

• Implement monitoring, logging, and alerting (CloudWatch, CloudTrail, centralized logging) to support secure, observable, and auditable delivery pipelines.

• Integrate identity and access management, encryption, secrets management, vulnerability scanning, and compliance controls into CI/CD workflows as part ofDevSecOpspractices.

• Ensure CI/CD pipelines and AWS solutions comply with applicable contractual and regulatory requirements (e.g., NIST 800-53/171, CMMC, FedRAMP, ISO 27001) and internal cyber standards.

• Collaborate with application development, cloud platform, cyber security, IT risk, and operations teams to ensure architectures are “DevSecOps-ready” and align with secure development standards.

• Provide technical leadership, coaching, and documentation for project teams adoptingDevSecOpsand secure CI/CD practices; develop reusable secure pipeline templates and patterns.

• Support proposals, technical reviews, and risk assessments where secure CI/CD, cloud security, andDevSecOpscapabilities are required, including input to labor category mapping and staffing.

Basic Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Cyber Security, or related field; or equivalent experience.

• Typically8+ years of relevant IT experience, with significant experience in DevOps/DevSecOpsand CI/CD for production systems.

• Hands-onexperience with AWS services (e.g., EC2, ECS/EKS, S3, IAM, VPC, CloudWatch/CloudTrail) insecurity-sensitiveor regulated environments.

• Proven experience designing and operating CI/CD pipelines using one or more modern platforms (AWSCodePipeline/CodeBuild, Jenkins, GitLab CI, GitHub Actions, Azure DevOps).

• Strong experience withinfrastructure-as-code(e.g.CloudFormation, Terraform) and secure configuration management and automation.

• Demonstrated experience promoting signed builds into an air-gapped, classified, or otherwise network-isolated target environment, including artifact transfer procedures and post-deployment verification.

• Experience with containers and orchestration (e.g.Docker, ECS, EKS, Kubernetes) including security aspects (image scanning, runtime security, least privilege).

• Demonstrated experience integrating security testing, vulnerability scanning, and compliance checks into CI/CD workflows (DevSecOps).

• Experience working under formal security and risk frameworks (e.g., NIST 800-53/171, CMMC, FedRAMP, ISO 27001, customer-specificcyber requirements).

• Strong communicationand collaboration skills, with ability to work across cyber, risk, engineering, and program management teams.

Preferred Qualifications

• AWS certifications (e.g., AWS Certified DevOps Engineer - Professional, AWS Certified Security - Specialty, AWS Solutions Architect).

• Security/DevSecOpscertifications.

• Experience supporting or implementing secure cloud architectures.

• Experience in enterpriseDevSecOpsor security transformation initiatives, or in a cloud/cyber center of excellence.

• Experience withmulti-accountAWS Organizations, landing zones, and centralized security/governance services.

OWN YOUR OPPORTUNITY
Explore a career in software development at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your dedication to advancing innovation.