Senior DevSecOps Engineer

Leidos LLC; Alexandria (VA); On-site; USD 131,000 - 237,000; Full time

Benefits offered by this job

Competitive compensation

Health and Wellness programs

Paid Leave

Job summary

Leidos is seeking a senior DevSecOps engineer to lead the development of a secure automation platform on AWS GovCloud for DoD mission applications. You will design and operate CI/CD pipelines, implement supply-chain security, and manage infrastructure as code across Kubernetes clusters.

The role requires hands-on experience with GitLab CI, Terraform, Argo CD, and security best practices in cloud-native environments. Strong communication and DoD compliance mindset are essential.

Qualifications

• DoD/Federal environment experience with DISA STIG and RMF compliance is preferred.
• Experience with AWS EKS and OpenShift Software supply chain security tools (Cosign, Sigstore, Grype).
• DoD security clearance is a plus.
• Certifications: at least 1 certification; CNCF Kubernetes (CKA/CKS/CKAD) is valued.
• AWS DevOps/Solution Architect/Security certs are a plus.
• HashiCorp Terraform certification is a plus.

Responsibilities

• Design and implement the foundational CI/CD and Security infrastructure on AWS GovCloud using modern cloud-native tech and as-code concepts.
• Architect and maintain 'Golden Path' CI/CD templates using GitLab CI components.
• Automate software supply chain with SAST, SCA, container scanning, SBOM, and artifact signing (Cosign/Sigstore).
• Develop modular Terraform code to provision AWS GovCloud and Kubernetes infrastructure.
• Manage cluster configurations declaratively using GitOps (Argo CD), Kustomize, and Helm.
• Maintain core platform services such as GitLab, Jira, Confluence, and Vault.
• Configure GitLab Runner on Kubernetes ensuring security and scalability.
• Automate security controls (NIST 800-53 RMF ATO) and compliance checks (OPA, Kyverno).
• Implement observability stack: Loki/Vector, Prometheus, Grafana; centralize logging to SIEM.

Skills

GitLab CI

Kubernetes

Terraform

Argo CD

Prometheus

Grafana

HashiCorp Vault

Bash scripting

Python

Go

SIEM integration

Education

Bachelor's Degree

Tools

Cosign

Sigstore

OpenShift

GitLab Runner

Job description

Join us in transforming how technology serves those who serve. At Leidos, we’re not just delivering solutions - we’re pioneering the future of defense and intelligence technology. Our diverse teams of innovators unite around a singular purpose: empowering our customers to succeed in their critical missions. We believe in leading with integrity, investing in our communities, and building sustainably for tomorrow. Shape the future of digital defense. Our Digital Modernization sector is at the forefront of next-generation technology, architecting cutting-edge solutions in cyber defense, logistics optimization, security operations, and decision intelligence. We’re the minds behind the mission-critical systems that keep our nation secure. Your opportunity to lead transformation. Join the core engineering team building the new USCG DevSecOps platform that will be used by hundreds of mission-application developers across the Coast Guard. If you are an expert in building secure, automated platforms and want to make a tangible impact on a critical national security mission, this role is for you.

Primary Responsibilities

• As a senior member of the team, you will design and implement the foundational CI/CD and Security infrastructure on AWS GovCloud utilizing modern Cloud native technologies, automation and "as-code" paradigms.
• CI/CD & Supply Chain Security: Architect and maintain "Golden Path" CI/CD templates using GitLab CI Components.
• Engineer and automate the software supply chain, integrating SAST, SCA, container scanning, SBOM generation and artifact signing with Cosign/Sigstore.
• Infrastructure as Code (IaC) & GitOps: Develop modular Terraform code to provision and manage the platform’s AWS GovCloud and Kubernetes infrastructure.
• Implement and manage all cluster-level and application configurations declaratively using GitOps (Argo CD), Kustomize, and Helm.
• Platform Engineering: Deploy, configure, and maintain the core platform services - including GitLab, Jira, Confluence, and HashiCorp Vault.
• Manage the GitLab Runner architecture on Kubernetes, ensuring fleet-wide security and scalability.
• Security & Compliance Automation: Implement and validate the technical controls such as NIST 800-53 RMF based Authority to Operate (ATO).
• Automate security hardening and compliance checks using tools like OPA, Kyverno.
• Observability & Monitoring: Implement and manage the platform’s observability stack, including centralized logging with Vector/Loki, metrics with Prometheus, and dashboards with Grafana.
• Configure secure log forwarding to the enterprise SIEM.

Basic Qualifications

• Bachelor’s Degree and 12+ years in an IT discipline, with 5+ years in a hands-on DevSecOps role.
• Expert-level knowledge of GitLab CI, including building complex, reusable pipeline templates.
• Strong proficiency with Kubernetes Deep, practical expertise with Terraform in an AWS environment (GovCloud highly preferred).
• Hands-on experience implementing GitOps principles with Argo CD.
• Hands-on experience with observability tools, including Prometheus, Grafana, and a centralized logging stack (e.g., Loki, Vector, or Fluentd).
• Experience configuring log shipping to a SIEM.
• Solid understanding of cloud-native security, including container hardening and secrets management with HashiCorp Vault.
• Proficiency in a scripting language such as Bash, Python or Go.

Preferred Qualifications

• Experience in a DoD/Federal environment with DISA STIG and RMF compliance mandates.
• Experience with AWS EKS, Red Hat OpenShift Software supply chain security tools (Cosign, Syft, Grype).
• An existing DoD security clearance.
• Certifications- Must have at least 1 certification to be considered.
• CNCF Kubernetes certifications: CKA or CKS or CKAD
• AWS Certified: DevOps Engineer or Solution Architect Associate or Security
• HashiCorp Certified: Terraform Associate

At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We’re not hiring followers. We’re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We’re already at step 30 - and moving faster than anyone else dares.

Pay Range

$131,300.00 - $237,350.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary.

Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That’s why we craft compensation packages that reflect the importance of the work we do for our customers.

• competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave
• Retirement

More details are available here.

Securing Your Data

Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.