Senior DevSecOps Engineer in Oklahoma City

Energy Jobline ZR; Oklahoma City (OK); On-site; USD 140,000 - 190,000; Full time

Job summary

Leidos is seeking a Senior DevSecOps Engineer in Oklahoma City, OK to lead security within the DevOps pipeline for a DoD program. You will drive security tooling in CI/CD, perform risk assessments, and guide secure coding practices across cross-functional teams.

The role requires active TS/SCI clearance and experience with IaC, cloud, and container technologies in hybrid environments. On-site work in Oklahoma City with strict security requirements.

Qualifications

• US citizen with active Top Secret clearance and ability to obtain SCI
• Bachelor’s degree with 8+ years of experience or Master’s with 6+ years
• DoD 8140 intermediate or DoD 8570 IAM Level II certifications or higher
• Strong understanding of software development paradigms and supporting tech (change mgmt, version control, CI/CD)
• Experience with IaC/CaC and DevSecOps tooling in CI/CD pipelines
• Strong background in relational DBs (PostgreSQL, MySQL, MS SQL)
• Experience with Linux/Windows admin, networks, and common protocols
• Experience in hybrid cloud environments (Azure/AWS/GCP)

Responsibilities

• Lead design and implementation of security practices in the DevOps pipeline for DoD apps
• Evaluate and integrate security tools into CI/CD workflows
• Conduct vulnerability assessments, threat modeling, and penetration testing
• Collaborate to promote secure coding, incident response, and training
• Mentor junior/mid-level engineers and foster knowledge sharing
• Automate security testing and compliance using IaC and automation tools
• Stay updated on DevSecOps trends and security best practices
• Design and implement BC/DR solutions in complex environments

Skills

DevSecOps

CI/CD

IaC

CaC

Security tooling

Kubernetes

Docker

Cloud (Azure/AWS/GCP)

DoD experience

Strong problem solving

Education

Bachelor's degree in a related field

Master's degree in a related field

Tools

Terraform

Bicep

CloudFormation

Chef

Puppet

Ansible

Jira

GitLab

Kubernetes

Job description

Job Description

Description

The Defense Sector at Leidos is looking for a Senior DevSecOps Engineer to support a fast-paced program with the Air Force Life Cycle Management Center. The Senior DevSecOps Engineer will enhance the integration of security practices into our DevOps processes for a large Air Force weapons system program. This role is vital for ensuring that security is a fundamental aspect of the software development lifecycle. The ideal candidate will have experience in DevSecOps practices and a strong desire to improve security measures within our applications. This position offers a valuable opportunity to further develop your career in DevSecOps within an Air Force program, contributing to the secure and efficient development of software in a challenging and innovative environment.

Senior DevSecOps Engineer

Oklahoma City, OK

TS/SCI Clearance

Primary Responsibilities

• Lead the design and implementation of security practices within the DevOps pipeline for DoD applications, ensuring alignment with regulatory requirements.
• Evaluate and select security tools, integrating them into CI/CD workflows to enhance application security.
• Conduct advanced vulnerability assessments, threat modeling, and penetration testing to proactively identify and mitigate security risks.
• Collaborate with cross-functional teams to develop and promote secure coding practices, incident response plans, and security training.
• Mentor and guide junior and mid-level engineers, fostering knowledge sharing and professional growth within the team.
• Drive the automation of security testing and compliance processes, utilizing Infrastructure as Code (IaC) and security automation tools.
• Stay abreast of industry trends, emerging threats, and best practices in DevSecOps and cybersecurity to continually improve security posture.
• Assessing, designing, developing, testing, and implementing Business Continuity & Disaster Recovery (BC/DR) solutions into a complex environment.

Basic Qualifications

• US with at least an active Top Secret clearance and the ability to obtain and maintain a SCI prior to your start date
• Bachelor’s degree with 8+ years of experience or a Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree
• DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher
• Strong understanding of software development paradigms and supporting technologies (e.g. change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab)
• Strong background using Infrastructure as Code (IaC) and Configuration as Code (CaC)
• Strong experience configuring CI/CD pipelines supporting software development activities in a DevSecOps environment
• Strong background in relational databases such as PostgreSQL, MySQL, or MS SQL Server
• Strong experience administering complex environments with Linux and Windows operating systems, network administration, and networking protocols/functions (e.g., HTTP, HTTPS, SSL/TLS, SMTP, DNS)
• Extensive experience integrating security tooling into a hybrid cloud environment, with a nuanced understanding of the capabilities and drawbacks of each component
• Extensive experience provisioning and managing resources within hybrid IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.)
• Extensive experience with container technologies such as Docker and container orchestration tools like Kubernetes
• Experience with automated provisioning and configuration tools like Terraform, Bicep, CloudFormation, Chef, Puppet, Ansible or similar technologies
• Experience integrating cloud services into solutions, especially Azure cloud services
• Excellent problem solving and analysis skills, including the ability to logically create structure and order from unstructured inputs
• Self-starter that is able to work independently while possessing the communication skills to work effectively with software development teams and customers
• Excellent interpersonal, verbal and written communication skills

Qualifications

• Experience with Air Force Life Cycle Management Center programs
• Microsoft Certified: Azure Solutions Architect Expert or similar certification
• Advanced certifications such as Certified Information Systems Security Professional (CISSP), Certified DevSecOps Engineer (CDE), or similar
• Extensive experience with security tools and practices relevant to DevSecOps (e.g., SAST, DAST, IAST)
• Experience deploying, configuring, and managing DevSecOps toolchains for an enterprise
• Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security frameworks
• Strong understanding of container security and orchestration tools (e.g., Kubernetes)
• Experience delivering software solutions into high-security or air-gapped environments in defense or other highly regulated industries such as finance or healthcare
• Experience with compliance standards (e.g., OWASP, NIST) and DoD security regulations
• Proven ability to drive change and influence security culture across an organization

DABAOPP1

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step