Senior DevSecOps Engineer - Kubernetes on AWS & Secure CI/CD

CACI; United States; On-site; USD 113,000 - 238,000; Full time

Job summary

CACI is seeking a Senior DevSecOps Engineer to architect and secure scalable Kubernetes infrastructure on AWS using RKE2, and to build robust CI/CD pipelines with GitLab, ArgoCD, and Jenkins. You will craft Helm charts, hardened Docker images, and manage Harbor/Nexus, while enforcing security standards across the SDLC.

You will own automation scripts in Python/Bash, optimize performance, and contribute to documentation.

Qualifications

• Current TS/SCI clearance with Polygraph.
• Bachelor's degree in Computer Science or related field, or equivalent experience.
• 3+ years (mid-level) or 6+ years (senior-level) in DevOps, Infrastructure, or DevSecOps in a cloud environment.
• Advanced proficiency in Python and/or Bash scripting for automation and operational support.
• Strong Linux/Unix command line proficiency, preferably on RHEL-based systems.
• Experience building and maintaining CI/CD pipelines using GitLab CI/CD, Jenkins, ArgoCD, and Helm.
• Strong proficiency with Docker — writing Dockerfiles, building hardened images, and integrating builds into pipelines.
• Hands‑on Kubernetes experience — cluster operations, workload management, RBAC, networking, and troubleshooting.
• Familiarity with agile methodologies and ability to operate effectively within a distributed team.
• Ability to travel up to 5% of the time.

Responsibilities

• Develop features to automate, scale, test, and secure a Kubernetes-based infrastructure running on AWS with RKE2.
• Build, optimize, and maintain CI/CD pipelines using GitLab CI/CD, Jenkins, and ArgoCD, supporting automated build, test, scan, and deployment workflows.
• Author, template, and manage Helm charts for application and infrastructure deployment across multiple environments.
• Build and maintain hardened Docker container images, including STIG-compliant base images, optimized Dockerfiles, and integration with Harbor and CI/CD pipelines.
• Manage and scale RKE2 Kubernetes clusters, including workload scheduling, networking, RBAC, secrets management, and cluster lifecycle operations.
• Administer Harbor (container registry) and Nexus (artifact repository), ensuring availability, security, and pipeline integration.
• Integrate Trivy and SonarQube into pipelines; remediate findings in coordination with security stakeholders.
• Enhance performance monitoring; identify bottlenecks and optimize cloud infrastructure and resource utilization.
• Author Python and Bash automation scripts to reduce toil and support infrastructure lifecycle management.
• Maintain technical documentation, runbooks, and architecture diagrams.

Skills

Python

Bash scripting

Linux/Unix CLI

Kubernetes

Docker

Agile methodologies

Education

Bachelor's degree in Computer Science or related field

Tools

GitLab CI/CD

ArgoCD

Jenkins

Helm

Harbor

Nexus

Trivy

SonarQube

Kubernetes

RKE2

Terraform

Packer

Ansible

AWS

Job description

CACI is seeking a Senior DevSecOps Engineer to architect and secure scalable Kubernetes infrastructure on AWS using RKE2, and to build robust CI/CD pipelines with GitLab, ArgoCD, and Jenkins. You will craft Helm charts, hardened Docker images, and manage Harbor/Nexus, while enforcing security standards across the SDLC.

You will own automation scripts in Python/Bash, optimize performance, and contribute to documentation.