# DevSecOps Engineer **Company**: Leidos **Location**: Arlington, VA **Work arrangement**: onsite **Experience**: senior **Job type**: full-time **Salary**: $107,900.00 - $195,050.00 **Category**: Engineering **Industry**: Technology **Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Arlington-VA/DevSecOps-Engineer_R-00194937-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_194ce155-43d ## Description Leidos' Digital sector is seeking a DevSecOps Engineer to support the Defense Information Systems Agency (DISA) Compartmented Enterprise Services Office (CESO). The successful candidate will be primarily responsible for the software delivery platform, GitLab administration, CI/CD architecture, deployment automation, and developer enablement. **Primary Responsibilities** - Engineer, administer, and continuously improve the GitLab platform, including projects, groups, runners, repositories, permissions, scalability, and operational health. - Develop and maintain reusable GitLab pipeline templates, shared libraries, automation frameworks, and deployment workflows that support enterprise CI/CD standards and improve consistency, maintainability, and engineering productivity across Agile development teams. - Implement and continuously improve automated application security, software supply chain security, and compliance validation throughout the CI/CD lifecycle, including SAST, software composition analysis (SCA), container image scanning, secrets detection, and Infrastructure-as-Code scanning. - Develop and maintain standardized deployment patterns for Kubernetes applications utilizing GitOps methodologies, Helm, progressive deployment techniques, and automated deployment validation. - Administer GitLab Container Registry, package repositories, artifact repositories, and software dependency management platforms supporting secure software delivery. - Collaborate with Cloud Systems Owners to ensure cloud platforms effectively support automated software deployment, operational scalability, application resiliency, and platform reliability. - Partner with software development teams to improve build performance, deployment reliability, release quality, and developer productivity through automation and self-service engineering capabilities. - Partner with cybersecurity teams to align DevSecOps capabilities with organizational security policies, Federal guidance, and continuous monitoring requirements. - Troubleshoot and perform root cause analysis for complex build failures, deployment issues, pipeline performance problems, dependency management challenges, and software delivery failures. - Participate in peer reviews of pipeline designs, deployment strategies, and automation solutions to promote consistency, maintainability, and adherence to established standards. - Monitor and report on software delivery performance metrics, including pipeline reliability, deployment success rates, build performance, and deployment frequency, identifying opportunities to improve engineering productivity and operational excellence. - Contribute to DevSecOps engineering standards, pipeline documentation, release management processes, operational guidance, and platform governance documentation. - Evaluate emerging DevSecOps technologies, AI-assisted software engineering capabilities, software delivery methodologies, and automation techniques, recommending improvements that increase engineering productivity, security, and operational efficiency. - Participate in Agile ceremonies while supporting multiple software development teams. **Required Qualifications** - Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Engineering, or related field with 8–12 years of relevant experience, or Master’s degree with 6–10 years of experience. - Active TS clearance with SCI eligibility. - Ability to obtain and maintain a CI Poly and Special Program Access. - IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP). - Extensive experience designing, implementing, and administering enterprise CI/CD platforms supporting large-scale software development. - Advanced experience developing and administering GitLab CI/CD pipelines, including GitLab Runners, reusable pipeline templates, variables, artifacts, deployment workflows, and pipeline optimization. - Extensive experience administering GitLab repositories, merge requests, branching strategies, permissions, source code management, and platform governance. - Extensive experience developing Infrastructure as Code using Terraform, AWS CloudFormation, or similar technologies. - Advanced experience deploying containerized applications (Docker, Kubernetes) using Helm, GitOps methodologies, or comparable deployment tools. - Strong experience developing automation using Bash, Python, or similar scripting languages. - Experience administering Linux environments supporting CI/CD platforms and software development workflows. - Experience supporting AWS cloud services and cloud-native application deployments. - Extensive knowledge of software supply chain security, secrets management, dependency management, secure software development practices, and automated security testing. - Experience integrating automated testing, quality gates, compliance validation, and security scanning into enterprise CI/CD pipelines. - Demonstrated ability to contribute to technical initiatives, apply engineering standards, and improve software delivery practices. - Strong troubleshooting, communication, collaboration, and problem-solving skills. - Ability to obtain an SF-85 Public Trust suitability determination. - US Citizenship. **Preferred Qualifications** - Experience supporting DoD or other Federal software development programs. - Experience supporting DevSecOps initiatives in large Agile or SAFe software development organizations. - Experience implementing enterprise GitOps deployment methodologies using GitLab and Kubernetes. - Experience with GitLab Ultimate Security, SonarQube, Checkmarx, Veracode, Snyk, Trivy, or similar security analysis platforms. - Experience administering GitLab Container Registry, Nexus Repository Manager, Artifactory, or comparable artifact management platforms. - Experience supporting cloud-native application development using Kubernetes and AWS. - Experience implementing automated testing, deployment approvals, quality gates, compliance validation, and release governance within CI/CD pipelines. - AWS, GitLab, Kubernetes, Terraform, or comparable industry certifications. **Pay Range:** $107,900.00 - $195,050.00 ## Skills ### Required - GitLab administration - CI/CD architecture - deployment automation - developer enablement - Kubernetes platform administration - cloud operations - software supply chain security - secrets management - dependency management - secure software development practices - automated security testing - Infrastructure as Code - Terraform - AWS CloudFormation - containerized applications - Helm - GitOps methodologies - Bash - Python - Linux environments - AWS cloud services - cloud-native application deployments ### Nice to have - DoD or Federal software development programs - DevSecOps initiatives in large Agile or SAFe software development organizations - enterprise GitOps deployment methodologies - GitLab Ultimate Security - SonarQube - Checkmarx - Veracode - Snyk - Trivy - GitLab Container Registry - Nexus Repository Manager - Artifactory - cloud-native application development - automated testing - deployment approvals - quality gates - compliance validation - release governance - AWS - GitLab - Kubernetes --- Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Arlington-VA/DevSecOps-Engineer_R-00194937-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)