Senior DevSecOps Engineer - Hybrid AI/Cloud

CACI International Inc; National Harbor (MD); Hybrid; USD 113.000 - 238.000; Vollzeit

Zusammenfassung

CAC I International Inc. is seeking a Senior DevSecOps Engineer to secure AI-enabled applications and oversee secure CI/CD pipelines across cloud environments.

The role collaborates with AI engineers, cybersecurity, and cloud teams to embed security in the software development lifecycle and automate deployments. The position supports a hybrid work schedule (2–3 days on site) with a focus on secure infrastructure, IAM, secrets management, encryption, and compliance evidence collection.

Qualifikationen

• Bachelor’s degree + 7 years of experience in AI, ML, software engineering, or related field; equivalencies considered.
• Ability to obtain Public Trust clearance.
• At least five years of experience in DevSecOps, cloud engineering, software development, cybersecurity engineering, or related field.
• Experience building or maintaining CI/CD pipelines and automating software build, test, and deployment processes.
• Experience with infrastructure as code, such as Terraform, Bicep, or CloudFormation.
• Experience with cloud security controls, including identity and access management, secrets management, encryption, and network security.
• Experience integrating automated security testing into software delivery workflows, including vulnerability, dependency, and container scanning.
• Experience with source control and pipeline platforms such as GitHub Actions, Azure DevOps, or GitLab CI/CD.
• Familiarity with containers and container security, including Docker and Kubernetes.
• Understanding of secure software development practices and common application security risks.
• Ability to collaborate with developers, cybersecurity staff, cloud teams, and technical stakeholders to resolve security and deployment issues.

Aufgaben

• Build, maintain, and improve CI/CD pipelines for AI and software applications.
• Integrate security checks into development and deployment workflows, including code, dependency, container, and infrastructure scanning.
• Automate infrastructure provisioning and configuration using infrastructure as code.
• Implement secure deployment patterns for cloud-hosted applications, APIs, containers, and AI services.
• Apply security controls for identity and access management, secrets, encryption, network boundaries, and least-privilege access.
• Work with AI engineers to protect prompts, model endpoints, retrieval pipelines, training or reference data, and connected tools from unauthorized access or exposure.
• Support containerization and orchestration using technologies such as Docker and Kubernetes, where applicable.
• Establish and maintain artifact management, configuration management, release controls, and deployment documentation.
• Identify vulnerabilities and misconfigurations; coordinate remediation with engineering and cybersecurity teams.
• Support security assessments, authorization activities, audits, and compliance evidence collection.
• Monitor pipeline and deployment issues, troubleshoot failures, and improve automation and developer workflows.
• Document DevSecOps processes, security controls, pipeline configurations, and operational procedures.
• Contribute reusable components, technical documentation, and engineering practices that improve consistency and maintainability.

Kenntnisse

CI/CD pipelines

Security testing

Infrastructure as code

Cloud engineering

DevSecOps

Collaboration

Ausbildung

Bachelor’s degree + 7 years

Tools

Terraform

Bicep

CloudFormation

GitHub Actions

Azure DevOps

GitLab CI/CD

Docker

Kubernetes

Jobbeschreibung

CAC I International Inc. is seeking a Senior DevSecOps Engineer to secure AI-enabled applications and oversee secure CI/CD pipelines across cloud environments.

The role collaborates with AI engineers, cybersecurity, and cloud teams to embed security in the software development lifecycle and automate deployments. The position supports a hybrid work schedule (2–3 days on site) with a focus on secure infrastructure, IAM, secrets management, encryption, and compliance evidence collection.