# Senior DevSecOps Engineer

**Company**: Leidos
**Location**: Alexandria, VA
**Experience**: senior
**Job type**: full-time
**Salary**: $131,300.00 - $237,350.00
**Category**: Defence & Intelligence
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Alexandria-VA/XMLNAME---Senior-DevSecOps-Engineer-_R-00192939?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_064c8014-2da

## Description

Join the core engineering team building the new USCG DevSecOps platform that will be used by hundreds of mission-application developers across the Coast Guard. As a senior member of the team, you will design and implement the foundational CI/CD and Security infrastructure on AWS GovCloud utilizing modern Cloud native technologies, automation and “as-code” paradigms.

**Primary Responsibilities**

- CI/CD & Supply Chain Security: Architect and maintain "Golden Path" CI/CD templates using GitLab CI Components. Engineer and automate the software supply chain, integrating SAST, SCA, container scanning, SBOM generation and artifact signing with Cosign/Sigstore.

- Infrastructure as Code (IaC) & GitOps: Develop modular Terraform code to provision and manage the platform's AWS GovCloud and Kubernetes infrastructure. Implement and manage all cluster-level and application configurations declaratively using GitOps (Argo CD), Kustomize, and Helm.

- Platform Engineering: Deploy, configure, and maintain the core platform services,including GitLab, Jira, Confluence, and HashiCorp Vault. Manage the GitLab Runner architecture on Kubernetes, ensuring fleet-wide security and scalability.

- Security & Compliance Automation: Implement and validate the technical controls such as NIST 800-53 RMF based Authority to Operate (ATO). Automate security hardening and compliance checks using tools like OPA, Kyverno.

- Observability & Monitoring: Implement and manage the platform's observability stack, including centralized logging with Vector/Loki, metrics with Prometheus, and dashboards with Grafana. Configure secure log forwarding to the enterprise SIEM.

**Basic Qualifications**

- Bachelor's Degree and ​12+ years in an IT discipline, with 5+ years in a hands-on DevSecOps role.

- Expert-level knowledge of GitLab CI, including building complex, reusable pipeline templates.

- Strong proficiency with Kubernetes

- Deep, practical expertise with Terraform in an AWS environment (GovCloud highly preferred).

- Hands-on experience implementing GitOps principles with Argo CD.

- Hands-on experience with observability tools, including Prometheus, Grafana, and a centralized logging stack (e.g., Loki, Vector, or Fluentd). Experience configuring log shipping to a SIEM.

- Solid understanding of cloud-native security, including container hardening and secrets management with HashiCorp Vault.

- Proficiency in a scripting language such as Bash, Python or Go

**Preferred Qualifications**

- Experience in a DoD/Federal environment with DISA STIG and RMF compliance mandates.

- Experience with AWS EKS, Red Hat OpenShift

- Software supply chain security tools (Cosign, Syft, Grype).

- An existing DoD security clearance.

**Certifications**

- Must have at least 1 certification to be considered.

- CNCF Kubernetes certifications: CKA or CKS or CKAD

- AWS Certified: DevOps Engineer or Solution Architect Associate or Security

- HashiCorp Certified: Terraform Associate

## Skills

### Required
- GitLab CI
- Kubernetes
- Terraform
- GitOps
- Argo CD
- Prometheus
- Grafana
- Vector
- Loki
- HashiCorp Vault
- Bash
- Python
- Go

### Nice to have
- AWS EKS
- Red Hat OpenShift
- Cosign
- Syft
- Grype
- DoD security clearance

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Alexandria-VA/XMLNAME---Senior-DevSecOps-Engineer-_R-00192939?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)