CACI
Senior DevSecOps Engineer
- Compensation
- Not disclosed
- Location
- Chantilly, VA, US
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Contract
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Current TS/SCI clearance with Polygraph.
- Bachelor's degree in Computer Science or related field, or equivalent experience.
- 3+ years (mid-level) or 6+ years (senior-level) in DevOps, Infrastructure, or DevSecOps in a cloud environment.
- Advanced proficiency in Python and/or Bash scripting for automation and operational support.
- Strong Linux/Unix command line proficiency, preferably on RHEL-based systems.
- Experience building and maintaining CI/CD pipelines using GitLab CI/CD, Jenkins, ArgoCD, and Helm.
- Strong proficiency with Docker — writing Dockerfiles, building hardened images, and integrating builds into pipelines.
- Hands-on Kubernetes experience — cluster operations, workload management, RBAC, networking, and troubleshooting.
- Familiarity with agile methodologies and ability to operate effectively within a distributed team.
- Ability to travel up to 5% of the time.
Nice to have
- Experience with AWS services and cloud-native infrastructure patterns.
- Hands-on experience with Terraform for cloud resource provisioning and IaC.
- Experience with RKE2 or other enterprise Kubernetes distributions in air-gapped or restricted environments.
- Familiarity with Harbor, Nexus, Trivy, and SonarQube in a pipeline context.
- Experience with Cilium for Kubernetes network policy and cluster networking.
- Experience with Packer or Ansible for image and configuration management.
- Relevant certifications: CKA/CKAD/CKS, AWS DevOps Professional, or CompTIA Security+
Full description
Job Title: Senior DevSecOps Engineer
Job Category: Engineering
Time Type: Full time
Minimum Clearance Required to Start: TS/SCI with Polygraph
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Continental US
- * *
The Opportunity:
As part of the Clairvoyant program, you will build and support the backbone of a mission-critical, cloud-native ecosystem — a scalable software-hosting and data-dissemination platform designed to accelerate the deployment of advanced analytics. You will bridge complex mission requirements and high-performance automated infrastructure, owning everything from secure pipeline design to cloud resource optimization. As a DevOps / Infrastructure / DevSecOps Engineer on an AWS-based, Kubernetes-native environment, you will:
- Architect Resilience: Design and maintain scalable RKE2/Kubernetes infrastructure on AWS with high availability and fault tolerance.
- Orchestrate Delivery: Build and refine CI/CD pipelines using GitLab CI/CD, ArgoCD, Jenkins, and Helm for seamless code-to-cloud transitions.
- Secure the Stack: Integrate automated security scanning (Trivy, SonarQube) and enforce compliance with government security standards throughout the development lifecycle.
- Optimize Performance: Identify bottlenecks and engineer solutions across cloud and container environments, from cluster tuning to artifact management.
Responsibilities:
- Develop features to automate, scale, test, and secure a Kubernetes-based infrastructure running on AWS with RKE2.
- Build, optimize, and maintain CI/CD pipelines using GitLab CI/CD, Jenkins, and ArgoCD, supporting automated build, test, scan, and deployment workflows.
- Author, template, and manage Helm charts for application and infrastructure deployment across multiple environments.
- Build and maintain hardened Docker container images, including STIG-compliant base images, optimized Dockerfiles, and integration with Harbor and CI/CD pipelines.
- Manage and scale RKE2 Kubernetes clusters, including workload scheduling, networking, RBAC, secrets management, and cluster lifecycle operations.
- Administer Harbor (container registry) and Nexus (artifact repository), ensuring availability, security, and pipeline integration.
- Integrate Trivy and SonarQube into pipelines; remediate findings in coordination with security stakeholders.
- Enhance performance monitoring; identify bottlenecks and optimize cloud infrastructure and resource utilization.