Senior DevSecOps Engineer: Kubernetes, GitOps & Secure CI/CD

CACI; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

CACI is seeking a Senior DevSecOps Engineer to join a DoD/AF customer team focused on cloud-native platforms. You will drive Kubernetes platform engineering, IaC with Terraform, and GitOps-based deployment across mission-critical environments.

Responsibilities include building secure CI/CD pipelines, enforcing DISA STIGs/NIST RMF, and maintaining secure configurations while producing comprehensive security and operation documentation.

Qualifications

• U.S. Citizen with eligibility for Secret Clearance.
• 7+ years of relevant professional experience with a related degree.
• Experience developing Terraform modules and reusable IaC patterns for cloud, network, and Kubernetes resources.
• Experience implementing GitOps workflows with tools such as Argo CD, Flux, GitLab, GitHub, or similar platforms.
• 3-5 years experience designing and deploying Kubernetes-based solutions; Big Bang is a plus.
• Experience with CI/CD pipelines, containerization, and secure DevSecOps practices.
• Strong familiarity with DISA STIGs, RMF, NIST SP 800-53, ATO processes, POA&M management, continuous monitoring, and security compliance evidence generation.

Responsibilities

• Deploy, configure, and sustain Kubernetes-based platforms and mission applications using Big Bang, Helm, and GitOps deployment practices.
• Develop and maintain Terraform-based Infrastructure as Code (IaC) for cloud infrastructure, Kubernetes resources, networking, IAM, and platform services.
• Build, secure, and optimize CI/CD pipelines for application and infrastructure delivery, including reusable pipeline templates, automated testing, and controlled release promotion.
• Triage, prioritize, remediate, and validate infrastructure, container, and application security findings in accordance with established vulnerability-management SLAs.
• Implement and maintain hardened Kubernetes and cloud configuration baselines aligned with DISA STIGs, NIST RMF, and organizational security requirements.
• Manage Kubernetes security controls, including RBAC, network policies, pod security standards, admission controls, secrets management, and secure ingress/egress configurations.
• Maintain GitOps workflows using Git as the authoritative source for infrastructure and platform configuration; ensure deployed environments remain aligned with approved code.
• Monitor CI/CD platforms, runners, deployments, and Kubernetes workloads; troubleshoot build, deployment, performance, and availability issues.
• Develop automated patching, configuration management, and compliance-validation processes to reduce manual effort and configuration drift.
• Produce security and operational documentation, including architecture diagrams, implementation procedures, scan evidence, remediation plans, and POA&M updates.
• Support RMF and ATO lifecycle activities by collecting control evidence, addressing assessment findings, and maintaining continuous-monitoring artifacts.

Skills

DevSecOps

Terraform

GitOps

Kubernetes

CI/CD pipelines

Security compliance

Education

Related degree

Tools

Argo CD

Flux

GitLab

GitHub

AWS (EKS)

Terraform

Job description

CACI is seeking a Senior DevSecOps Engineer to join a DoD/AF customer team focused on cloud-native platforms. You will drive Kubernetes platform engineering, IaC with Terraform, and GitOps-based deployment across mission-critical environments.

Responsibilities include building secure CI/CD pipelines, enforcing DISA STIGs/NIST RMF, and maintaining secure configurations while producing comprehensive security and operation documentation.