Senior DevSecOps Architect (AWS GovCloud, GitOps)

Leidos LLC; Alexandria (VA); On-site; USD 131,000 - 237,000; Full time

Benefits offered by this job

Competitive compensation

Health and Wellness programs

Paid Leave

Job summary

Leidos is seeking a senior DevSecOps engineer to lead the development of a secure automation platform on AWS GovCloud for DoD mission applications. You will design and operate CI/CD pipelines, implement supply-chain security, and manage infrastructure as code across Kubernetes clusters.

The role requires hands-on experience with GitLab CI, Terraform, Argo CD, and security best practices in cloud-native environments. Strong communication and DoD compliance mindset are essential.

Qualifications

• DoD/Federal environment experience with DISA STIG and RMF compliance is preferred.
• Experience with AWS EKS and OpenShift Software supply chain security tools (Cosign, Sigstore, Grype).
• DoD security clearance is a plus.
• Certifications: at least 1 certification; CNCF Kubernetes (CKA/CKS/CKAD) is valued.
• AWS DevOps/Solution Architect/Security certs are a plus.
• HashiCorp Terraform certification is a plus.

Responsibilities

• Design and implement the foundational CI/CD and Security infrastructure on AWS GovCloud using modern cloud-native tech and as-code concepts.
• Architect and maintain 'Golden Path' CI/CD templates using GitLab CI components.
• Automate software supply chain with SAST, SCA, container scanning, SBOM, and artifact signing (Cosign/Sigstore).
• Develop modular Terraform code to provision AWS GovCloud and Kubernetes infrastructure.
• Manage cluster configurations declaratively using GitOps (Argo CD), Kustomize, and Helm.
• Maintain core platform services such as GitLab, Jira, Confluence, and Vault.
• Configure GitLab Runner on Kubernetes ensuring security and scalability.
• Automate security controls (NIST 800-53 RMF ATO) and compliance checks (OPA, Kyverno).
• Implement observability stack: Loki/Vector, Prometheus, Grafana; centralize logging to SIEM.

Skills

GitLab CI

Kubernetes

Terraform

Argo CD

Prometheus

Grafana

HashiCorp Vault

Bash scripting

Python

Go

SIEM integration

Education

Bachelor's Degree

Tools

Cosign

Sigstore

OpenShift

GitLab Runner

Job description

Leidos is seeking a senior DevSecOps engineer to lead the development of a secure automation platform on AWS GovCloud for DoD mission applications. You will design and operate CI/CD pipelines, implement supply-chain security, and manage infrastructure as code across Kubernetes clusters.

The role requires hands-on experience with GitLab CI, Terraform, Argo CD, and security best practices in cloud-native environments. Strong communication and DoD compliance mindset are essential.