Senior DevSecOps Engineer

Koitecc Solutions; Oklahoma City (OK); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Senior DevSecOps Engineer in Oklahoma City, OK. The role focuses on embedding security into the DevOps lifecycle for a large Air Force program, leveraging IaC, CI/CD, and container technologies. You will guide security tooling across hybrid cloud deployments and mentor engineers.

The candidate will lead vulnerability assessments, threat modeling, and incident response planning, ensuring secure software delivery and resilient operations within a high-security environment.

Qualifications

• Active Top Secret clearance with ability to obtain SCI
• Bachelor’s degree with 8+ years of experience or Master’s with 6+ years
• DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher
• Proficient in CI/CD, change management and version control
• Experience with IaC and CaC
• Strong experience with Linux/Windows, networks, databases
• Experience with hybrid cloud environments (Azure, AWS)
• Proven ability to work independently and mentor others

Responsibilities

• Lead design and implementation of security practices within the DevOps pipeline for DoD applications
• Evaluate and integrate security tools into CI/CD workflows
• Conduct vulnerability assessments, threat modeling, and penetration testing
• Collaborate to promote secure coding practices and incident response plans
• Mentor junior engineers and promote knowledge sharing
• Automate security testing and compliance using IaC
• Stay updated on DevSecOps trends and security posture
• Assess, design, develop, test BC/DR solutions in complex environments

Skills

DevSecOps

CI/CD

IaC

Kubernetes

Docker

Security tooling

Vulnerability assessment

Threat modeling

Incident response

Automation

Education

Bachelor's degree

Master's degree

Tools

Docker

Kubernetes

Terraform

Ansible

CloudFormation

Puppet

Chef

Job description

Senior DevSecOps Engineer

Oklahoma City, OK

TS/SCI Clearance

The Defense Sector at Leidos is looking for a Senior DevSecOps Engineer to support a fast-paced program with the Air Force Life Cycle Management Center. The Senior DevSecOps Engineer will enhance the integration of security practices into our DevOps processes for a large Air Force weapons system program. This role is vital for ensuring that security is a fundamental aspect of the software development lifecycle. The ideal candidate will have experience in DevSecOps practices and a strong desire to improve security measures within our applications. This position offers a valuable opportunity to further develop your career in DevSecOps within an Air Force program, contributing to the secure and efficient development of software in a challenging and innovative environment.

Primary Responsibilities:

• Lead the design and implementation of security practices within the DevOps pipeline for DoD applications, ensuring alignment with regulatory requirements.
• Evaluate and select security tools, integrating them into CI/CD workflows to enhance application security.
• Conduct advanced vulnerability assessments, threat modeling, and penetration testing to proactively identify and mitigate security risks.
• Collaborate with cross-functional teams to develop and promote secure coding practices, incident response plans, and security training.
• Mentor and guide junior and mid-level engineers, fostering knowledge sharing and professional growth within the team.
• Drive the automation of security testing and compliance processes, utilizing Infrastructure as Code (IaC) and security automation tools.
• Stay abreast of industry trends, emerging threats, and best practices in DevSecOps and cybersecurity to continually improve security posture.
• Assessing, designing, developing, testing, and implementing Business Continuity & Disaster Recovery (BC/DR) solutions into a complex environment.

Basic Qualifications:

• US Citizen with at least an active Top Secret clearance and the ability to obtain and maintain a SCI prior to your start date
• Bachelor’s degree with 8+ years of experience or a Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree
• DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher
• Strong understanding of software development paradigms and supporting technologies (e.g. change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab)
• Strong background using Infrastructure as Code (IaC) and Configuration as Code (CaC)
• Strong experience configuring CI/CD pipelines supporting software development activities in a DevSecOps environment
• Strong background in relational databases such as PostgreSQL, MySQL, or MS SQL Server
• Strong experience administering complex environments with Linux and Windows operating systems, network administration, and networking protocols/functions (e.g., HTTP, HTTPS, SSL/TLS, SMTP, DNS)
• Extensive experience integrating security tooling into a hybrid cloud environment, with a nuanced understanding of the capabilities and drawbacks of each component
• Extensive experience provisioning and managing resources within hybrid IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.)
• Extensive experience with container technologies such as Docker and container orchestration tools like Kubernetes
• Experience with automated provisioning and configuration tools like Terraform, Bicep, CloudFormation, Chef, Puppet, Ansible or similar technologies
• Experience integrating cloud services into solutions, especially Azure cloud services
• Excellent problem solving and analysis skills, including the ability to logically create structure and order from unstructured inputs
• Self-starter that is able to work independently while possessing the communication skills to work effectively with software development teams and customers
• Excellent interpersonal, verbal and written communication skills

Preferred Qualifications:

• Experience with Air Force Life Cycle Management Center programs
• Microsoft Certified: Azure Solutions Architect Expert or similar certification
• Advanced certifications such as Certified Information Systems Security Professional (CISSP), Certified DevSecOps Engineer (CDE), or similar
• Extensive experience with security tools and practices relevant to DevSecOps (e.g., SAST, DAST, IAST)
• Experience deploying, configuring, and managing DevSecOps toolchains for an enterprise
• Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security frameworks
• Strong understanding of container security and orchestration tools (e.g., Kubernetes)
• Experience delivering software solutions into high-security or air-gapped environments in defense or other highly regulated industries such as finance or healthcare
• Experience with compliance standards (e.g., OWASP, NIST) and DoD security regulations
• Proven ability to drive change and influence security culture across an organization

Pay Range

Pay Range $107,900.00 - $195,050.00

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.