Leidos
DevSecOps Engineer
- Compensation
- Not disclosed
- Location
- Arlington, VA
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 6+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Engineering, or related field with 8–12 years of relevant experience, or Master’s degree with 6–10 years of experience
- Active TS clearance with SCI eligibility
- Ability to obtain and maintain a CI Poly and Special Program Access.
- IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
- Extensive experience designing, implementing, and administering enterprise CI/CD platforms supporting large-scale software development.
- Advanced experience developing and administering GitLab CI/CD pipelines, including GitLab Runners, reusable pipeline templates, variables, artifacts, deployment workflows, and pipeline optimization.
- Extensive experience administering GitLab repositories, merge requests, branching strategies, permissions, source code management, and platform governance.
- Extensive experience developing Infrastructure as Code using Terraform, AWS CloudFormation, or similar technologies.
- Advanced experience deploying containerized applications (Docker, Kubernetes) using Helm, GitOps methodologies, or comparable deployment tools.
- Strong experience developing automation using Bash, Python, or similar scripting languages.
- Experience administering Linux environments supporting CI/CD platforms and software development workflows.
- Experience supporting AWS cloud services and cloud-native application deployments.
- Extensive knowledge of software supply chain security, secrets management, dependency management, secure software development practices, and automated security testing.
- Experience integrating automated testing, quality gates, compliance validation, and security scanning into enterprise CI/CD pipelines.
- Demonstrated ability to contribute to technical initiatives, apply engineering standards, and improve software delivery practices.
- Strong troubleshooting, communication, collaboration, and problem-solving skills.
- Ability to obtain an SF-85 Public Trust suitability determination. [Update for DISA clearance requirements.]
- US Citizenship.
Nice to have
- Experience supporting DoD or other Federal software development programs.
- Experience supporting DevSecOps initiatives in large Agile or SAFe software development organizations.
- Experience implementing enterprise GitOps deployment methodologies using GitLab and Kubernetes.
- Experience with GitLab Ultimate Security, SonarQube, Checkmarx, Veracode, Snyk, Trivy, or similar security analysis platforms.
- Experience administering GitLab Container Registry, Nexus Repository Manager, Artifactory, or comparable artifact management platforms.
- Experience supporting cloud-native application development using Kubernetes and AWS.
- Experience implementing automated testing, deployment approvals, quality gates, compliance validation, and release governance within CI/CD pipelines.
- AWS, GitLab, Kubernetes, Terraform, or comparable industry certifications.
Full description
Leidos’ Digital sector is seeking a Systems Engineer with strong DevSecOps, identity security, and systems‑integration expertise to support the Defense Information Systems Agency (DISA) Compartmented Enterprise Services Office (CESO). This role is primarily responsible for the software delivery platform, GitLab administration, CI/CD architecture, deployment automation, and developer enablement. Cloud infrastructure, Kubernetes platform administration, and cloud operations are performed in close partnership with the Cloud Systems Owner team.
This position is 100% on-site in Arlington, VA and requires TS with SCI eligibility for consideration, as well as willingness and ability to obtain a poly in future.
Primary Responsibilities
- Engineer, administer, and continuously improve the GitLab platform, including projects, groups, runners, repositories, permissions, scalability, and operational health.
- Develop and maintain reusable GitLab pipeline templates, shared libraries, automation frameworks, and deployment workflows that support enterprise CI/CD standards and improve consistency, maintainability, and engineering productivity across Agile development teams.
- Implement and continuously improve automated application security, software supply chain security, and compliance validation throughout the CI/CD lifecycle, including SAST, software composition analysis (SCA), container image scanning, secrets detection, and Infrastructure-as-Code scanning.
- Develop and maintain standardized deployment patterns for Kubernetes applications utilizing GitOps methodologies, Helm, progressive deployment techniques, and automated deployment validation.
- Administer GitLab Container Registry, package repositories, artifact repositories, and software dependency management platforms supporting secure software delivery.
- Collaborate with Cloud Systems Owners to ensure cloud platforms effectively support automated software deployment, operational scalability, application resiliency, and platform reliability.
- Partner with software development teams to improve build performance, deployment reliability, release quality, and developer productivity through automation and self-service engineering capabilities.
- Partner with cybersecurity teams to align DevSecOps capabilities with organizational security policies, Federal guidance, and continuous monitoring requirements.
- Troubleshoot and perform root cause analysis for complex build failures, deployment issues, pipeline performance problems, dependency management challenges, and software delivery failures.
- Participate in peer reviews of pipeline designs, deployment strategies, and automation solutions to promote consistency, maintainability, and adherence to established standards.
- Monitor and report on software delivery performance metrics, including pipeline reliability, deployment success rates, build performance, and deployment frequency, identifying opportunities to improve engineering productivity and operational excellence.