Senior DevSecOps Engineer — DoD Security & CI/CD

Society of Defense Financial Management; Oklahoma City, Northern (OK, KY); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos in Oklahoma City, OK or Lorton, VA seeks a Senior DevSecOps Engineer to enhance security in the DoD DevOps pipeline for a large Air Force weapons system program. This role requires a TS/SCI clearance and hands-on DevSecOps expertise.

You will lead security practices, evaluate tools, conduct vulnerability assessments, and mentor engineers while automating security testing using IaC in a hybrid cloud environment.

Qualifications

• Active TS/SCI clearance or the ability to obtain and maintain one.
• 8+ years experience with software development in DoD environments.
• Proficient in DevSecOps, CI/CD, IaC/CaC and cloud architectures.
• Experience with security tooling integration and vulnerability management.

Responsibilities

• Lead design and implementation of security practices in the DoD DevOps pipeline.
• Evaluate and integrate security tools into CI/CD workflows.
• Conduct vulnerability assessments, threat modeling, and testing.
• Collaborate on secure coding practices and incident response plans.
• Mentor junior/mid-level engineers and promote security training.
• Automate security testing and compliance using IaC/ security tools.
• Stay current on threats and best practices in DevSecOps and cybersecurity.
• Assess, design, develop, test, and implement BC/DR solutions.

Skills

DevSecOps

CI/CD

IaC

CaC

Kubernetes

Docker

Security tooling

Linux/Windows

Cloud (Azure/AWS)

Threat modeling

Vulnerability assessment

DoD 8570 IAM II

Jira/GitLab

Education

Bachelor's degree

Master's degree

Tools

Terraform

Bicep

CloudFormation

Chef

Puppet

Ansible

Azure DevOps

Git

Job description

Leidos in Oklahoma City, OK or Lorton, VA seeks a Senior DevSecOps Engineer to enhance security in the DoD DevOps pipeline for a large Air Force weapons system program. This role requires a TS/SCI clearance and hands-on DevSecOps expertise.

You will lead security practices, evaluate tools, conduct vulnerability assessments, and mentor engineers while automating security testing using IaC in a hybrid cloud environment.