Senior DevSecOps Engineer

CACI International Inc; Chantilly (VA); On-site; USD 113,200 - 237,800; Full time

Benefits offered by this job

Healthcare

Wellness programs

Retirement benefits

Paid time off

Job summary

A technology contractor in Virginia seeks a Senior DevSecOps Engineer to manage and optimize a Kubernetes-based infrastructure on AWS. The role includes designing scalable systems, building CI/CD pipelines, and ensuring compliance through security integration. Candidates should have a Bachelor's in Computer Science or related field, strong Python and Bash skills, and current TS/SCI clearance with Polygraph. Competitive salary ranges from $113,200 to $237,800 based on experience and qualifications.

Qualifications

• Current TS/SCI clearance with Polygraph.
• 3+ years experience in DevOps, Infrastructure, or DevSecOps in a cloud environment.
• Experience building CI/CD pipelines using GitLab CI/CD, Jenkins, ArgoCD, and Helm.

Responsibilities

• Design and maintain scalable RKE2/Kubernetes infrastructure on AWS.
• Build and maintain CI/CD pipelines using GitLab CI/CD, Jenkins, and ArgoCD.
• Integrate automated security scanning and enforce compliance.

Skills

Python

Bash scripting

Kubernetes

Docker

CI/CD pipelines

Linux/Unix

Education

Bachelor's degree in Computer Science or related field

Tools

GitLab CI/CD

Jenkins

ArgoCD

Terraform

Harbor

Nexus

Trivy

SonarQube

Job description

Job Title: Senior DevSecOps Engineer
Job Category: Engineering
Time Type: Full time
Minimum Clearance Required to Start: TS/SCI with Polygraph
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Continental US

The Opportunity

As part of the Clairvoyant program, you will build and support the backbone of a mission‑critical, cloud‑native ecosystem—a scalable software‑hosting and data‑dissemination platform designed to accelerate the deployment of advanced analytics. You will bridge complex mission requirements and high‑performance automated infrastructure, owning everything from secure pipeline design to cloud resource optimization.

As a DevOps / Infrastructure / DevSecOps Engineer on an AWS‑based, Kubernetes‑native environment, you will:

• Architect Resilience: Design and maintain scalable RKE2/Kubernetes infrastructure on AWS with high availability and fault tolerance.
• Orchestrate Delivery: Build and refine CI/CD pipelines using GitLab CI/CD, ArgoCD, Jenkins, and Helm for seamless code‑to‑cloud transitions.
• Secure the Stack: Integrate automated security scanning (Trivy, SonarQube) and enforce compliance with government security standards throughout the development lifecycle.
• Optimize Performance: Identify bottlenecks and engineer solutions across cloud and container environments, from cluster tuning to artifact management.

Responsibilities

• Develop features to automate, scale, test, and secure a Kubernetes‑based infrastructure running on AWS with RKE2.
• Build, optimize, and maintain CI/CD pipelines using GitLab CI/CD, Jenkins, and ArgoCD, supporting automated build, test, scan, and deployment workflows.
• Author, template, and manage Helm charts for application and infrastructure deployment across multiple environments.
• Build and maintain hardened Docker container images, including STIG‑compliant base images, optimized Dockerfiles, and integration with Harbor and CI/CD pipelines.
• Manage and scale RKE2 Kubernetes clusters, including workload scheduling, networking, RBAC, secrets management, and cluster lifecycle operations.
• Administer Harbor (container registry) and Nexus (artifact repository), ensuring availability, security, and pipeline integration.
• Integrate Trivy and SonarQube into pipelines; remediate findings in coordination with security stakeholders.
• Enhance performance monitoring; identify bottlenecks and optimize cloud infrastructure and resource utilization.
• Author Python and Bash automation scripts to reduce toil and support infrastructure lifecycle management.
• Maintain technical documentation, runbooks, and architecture diagrams.

Qualifications

Required:

• Current TS/SCI clearance with Polygraph.
• Bachelor's degree in Computer Science or related field, or equivalent experience.
• 3+ years (mid‑level) or 6+ years (senior‑level) in DevOps, Infrastructure, or DevSecOps in a cloud environment.
• Advanced proficiency in Python and/or Bash scripting for automation and operational support.
• Strong Linux/Unix command line proficiency, preferably on RHEL‑based systems.
• Experience building and maintaining CI/CD pipelines using GitLab CI/CD, Jenkins, ArgoCD, and Helm.
• Strong proficiency with Docker—writing Dockerfiles, building hardened images, and integrating builds into pipelines.
• Hands‑on Kubernetes experience—cluster operations, workload management, RBAC, networking, troubleshooting.
• Familiarity with agile methodologies and ability to operate effectively within a distributed team.
• Ability to travel up to 5% of time.

Desired

• Experience with AWS services and cloud‑native infrastructure patterns.
• Hands‑on experience with Terraform for cloud resource provisioning and IaC.
• Experience with RKE2 or other enterprise Kubernetes distributions in air‑gapped or restricted environments.
• Familiarity with Harbor, Nexus, Trivy, and SonarQube in a pipeline context.
• Experience with Cilium for Kubernetes network policy and cluster networking.
• Experience with Packer or Ansible for image and configuration management.
• Relevant certifications: CKA/CKAD/CKS, AWS DevOps Professional, or CompTIA Security+.

Pay Range

There are a host of factors that can influence final salary, including geographic location, federal contract labor categories, prior work experience, specific skills and competencies, education, and certifications. We offer competitive compensation, benefits, and learning and development opportunities, including healthcare, wellness, financial, retirement, family support, continuing education, and paid time off. The proposed salary range for this position is $113,200 - $237,800.

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.