Senior DevOps CI/CD Engineer – AWS (DevSecOps Champion)

gdit; Fairfax (VA); Hybrid; USD 145,000 - 196,000; Full time

Benefits offered by this job

Hybrid work

Total Rewards package

Job summary

GDIT is seeking a senior Engineer - AWS DevSecOps Champion to support DOJ Homeland Security Task Force (HSTF) / NCC. You will lead secure CI/CD and DevSecOps practices for AWS-based solutions, designing pipelines and governance that embed security, compliance, and risk management into the delivery lifecycle for mission-critical systems.

Responsibilities include enforcing secure standards, building pipelines with integrated security, and implementing IaC across AWS accounts while aligning with

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Cyber Security, or related field or equivalent experience.
• Typically 8+ years of relevant IT experience with DevOps/DevSecOps and CI/CD for production systems.
• Hands-on experience with AWS services (EC2, ECS/EKS, S3, IAM, VPC, CloudWatch/CloudTrail) in sensitive or regulated environments.
• Proven experience designing and operating CI/CD pipelines using one or more modern platforms (CodePipeline, Jenkins, GitHub Actions, Azure DevOps).
• Strong experience with infrastructure-as-code (CloudFormation, Terraform) and secure configuration management and automation.

Responsibilities

• Define and enforce secure CI/CD and DevSecOps standards, patterns, and guardrails for AWS-hosted applications.
• Design, build, and maintain CI/CD pipelines with integrated security scanning, compliance checks, approvals, and testing.
• Lead IaC implementations (CloudFormation, Terraform) with embedded security baselines for AWS environments.
• Automate secure environment provisioning, configuration, and deployments across development, test, and production AWS accounts.
• Implement monitoring, logging, and alerting (CloudWatch, CloudTrail) for secure, observable pipelines.
• Integrate IAM, encryption, secrets management, vulnerability scanning, and compliance into CI/CD workflows.
• Ensure pipelines comply with NIST 800-53/171, CMMC, FedRAMP, ISO 27001 and internal cyber standards.
• Provide technical leadership and develop reusable secure pipeline templates; support risk assessments and proposals.

Skills

Controls Compliance

Identity Access Management (IAM)

Secure Software Development

Security Testing

Web Applications

Education

Bachelor’s degree in Computer Science, Information Systems, Engineering, Cyber Security, or related field

Tools

AWS

CloudFormation

Terraform

Jenkins

CodePipeline

Kubernetes

Job description

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Secret

Clearance Level Must Be Able to Obtain:

Secret

Public Trust/Other Required:

None

Job Family:

Software Engineering

Job Qualifications:

Skills:

Controls Compliance, Identity Access Management (IAM), Secure Software Development, Security Testing, Web Applications

Certifications:

None

Experience:

8 + years of related experience

US Citizenship Required:

Yes

Job Description:

DEVOPS ENGINEER PRINCIPAL

GDIT is looking for a Engineer - AWS (DevSecOpsChampion) a senior technical rolesupporting DOJ Homeland Security Task Force (HSTF) / National Coordination Center (NCC).This role leads secure CI/CD andDevSecOpspractices for AWS-based solutions, designing and governing pipelines and automation that embed security, compliance, and risk management into the delivery lifecycle formission-criticalsystems.

Responsibilities

• Define and enforce secure CI/CD andDevSecOpsstandards, patterns, and guardrails for AWS-hosted applications, in alignment with GDIT Cyber Security Policy, Cyber Security Handbook, and Cloud/Security standards.
• Design, build, andmaintainCI/CD pipelines (e.g., AWSCodePipeline/CodeBuild, Jenkins, GitLab CI, GitHub Actions, Azure DevOps) with integrated security scanning, compliance checks, approvals, and testing.
• Leadinfrastructure-as-code(IaC) implementations (CloudFormation, Terraform) with embedded security and configuration baselines, supporting secure provisioning of AWS environments.
• Automate secure environment provisioning, configuration, and deployments across development, test, and production AWS accounts, in line with cyber and IT risk management requirements.
• Implement monitoring, logging, and alerting (CloudWatch, CloudTrail, centralized logging) to support secure, observable, and auditable delivery pipelines.
• Integrate identity and access management, encryption, secrets management, vulnerability scanning, and compliance controls into CI/CD workflows as partof DevSecOpspractices.
• Ensure CI/CD pipelines and AWS solutionscomply withapplicable contractual and regulatory requirements (e.g., NIST 800-53/171, CMMC, FedRAMP, ISO 27001) and internal cyber standards.
• Collaborate with application development, cloud platform, cyber security, IT risk, and operations teams to ensure architectures are DevSecOps-ready and align with secure development standards.
• Provide technical leadership, coaching, and documentation for project teams adoptingDevSecOpsand secure CI/CD practices; develop reusable secure pipeline templates and patterns.
• Support proposals, technical reviews, and risk assessments where secure CI/CD, cloud security, andDevSecOpscapabilities arerequired, including input to labor category mapping and staffing.

Basic Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Cyber Security, or related field; or equivalent experience.
• Typically8+ years of relevant IT experience, withsignificant experiencein DevOps/DevSecOpsand CI/CD for production systems.
• Hands‑onexperience with AWS services (e.g., EC2, ECS/EKS, S3, IAM, VPC, CloudWatch/CloudTrail) insecurity‑sensitiveor regulated environments.
• Proven experience designing and operating CI/CD pipelines using one or more modern platforms (AWSCodePipeline/CodeBuild, Jenkins, GitLab CI, GitHub Actions, Azure DevOps).
• Strong experience withinfrastructure‑as‑code(e.g.CloudFormation, Terraform) and secure configuration management and automation.
• Demonstrated experience promoting signed builds into an air-gapped, classified, or otherwise network-isolated target environment, including artifact transfer procedures and post-deployment verification.
• Experience with containers and orchestration (e.g.Docker, ECS, EKS, Kubernetes) including security aspects (image scanning, runtime security, least privilege).
• Demonstrated experience integrating security testing, vulnerability scanning, and compliance checks into CI/CD workflows (DevSecOps).
• Experience working under formal security and risk frameworks (e.g., NIST 800-53/171, CMMC, FedRAMP, ISO 27001,customer‑specificcyber requirements).
• Strong communicationand collaboration skills, with ability to work across cyber, risk, engineering, and program management teams.

Preferred Qualifications

• AWS certifications (e.g., AWS Certified DevOps Engineer – Professional, AWS Certified Security – Specialty, AWS Solutions Architect).
• Security/DevSecOpscertifications.
• Experience supporting or implementing secure cloud architectures.
• Experience in enterpriseDevSecOpsor security transformation initiatives, or in a cloud/cyber center of excellence.
• Experience withmulti-accountAWS Organizations, landing zones, and centralized security/governance services.

OWN YOUR OPPORTUNITY
Explore a career in software development at GDIT and you'll find endless opportunities to grow alongside colleagues who share your dedication to advancing innovation.

The likely salary range for this position is $144,500 - $195,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

50-75%

Telecommuting Options:

Hybrid

Work Location:

USA VA Fairfax

Total Rewards at GDIT:

• Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
• To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.
• We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process:

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work:

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans