DevSecOps Engineer

Leidos’ Digital sector is seeking a Systems Engineer with strong DevSecOps, identity security, and systems‑integration expertise to support the Defense Information Systems Agency (DISA) Compartmented Enterprise Services Office (CESO). This role is primarily responsible for the software delivery platform, GitLab administration, CI/CD architecture, deployment automation, and developer enablement. Cloud infrastructure, Kubernetes platform administration, and cloud operations are performed in close partnership with the Cloud Systems Owner team.

This position is 100% on-site in Arlington, VA and requires TS with SCI eligibility for consideration, as well as willingness and ability to obtain a poly in future.

Primary Responsibilities

• Engineer, administer, and continuously improve the GitLab platform, including projects, groups, runners, repositories, permissions, scalability, and operational health.
• Develop and maintain reusable GitLab pipeline templates, shared libraries, automation frameworks, and deployment workflows that support enterprise CI/CD standards and improve consistency, maintainability, and engineering productivity across Agile development teams.
• Implement and continuously improve automated application security, software supply chain security, and compliance validation throughout the CI/CD lifecycle, including SAST, software composition analysis (SCA), container image scanning, secrets detection, and Infrastructure-as-Code scanning.
• Develop and maintain standardized deployment patterns for Kubernetes applications utilizing GitOps methodologies, Helm, progressive deployment techniques, and automated deployment validation.
• Administer GitLab Container Registry, package repositories, artifact repositories, and software dependency management platforms supporting secure software delivery.
• Collaborate with Cloud Systems Owners to ensure cloud platforms effectively support automated software deployment, operational scalability, application resiliency, and platform reliability.
• Partner with software development teams to improve build performance, deployment reliability, release quality, and developer productivity through automation and self-service engineering capabilities.
• Partner with cybersecurity teams to align DevSecOps capabilities with organizational security policies, Federal guidance, and continuous monitoring requirements.
• Troubleshoot and perform root cause analysis for complex build failures, deployment issues, pipeline performance problems, dependency management challenges, and software delivery failures.
• Participate in peer reviews of pipeline designs, deployment strategies, and automation solutions to promote consistency, maintainability, and adherence to established standards.
• Monitor and report on software delivery performance metrics, including pipeline reliability, deployment success rates, build performance, and deployment frequency, identifying opportunities to improve engineering productivity and operational excellence.
• Contribute to DevSecOps engineering standards, pipeline documentation, release management processes, operational guidance, and platform governance documentation.
• Evaluate emerging DevSecOps technologies, AI-assisted software engineering capabilities, software delivery methodologies, and automation techniques, recommending improvements that increase engineering productivity, security, and operational efficiency.
• Participate in Agile ceremonies while supporting multiple software development teams.

Required Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Engineering, or related field with 8–12 years of relevant experience, or Master’s degree with 6–10 years of experience. Additional experience may be considered in lieu of degree.
• Active TS clearance with SCI eligibility
• Ability to obtain and maintain a CI Poly and Special Program Access.
• IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
• Extensive experience designing, implementing, and administering enterprise CI/CD platforms supporting large-scale software development.
• Advanced experience developing and administering GitLab CI/CD pipelines, including GitLab Runners, reusable pipeline templates, variables, artifacts, deployment workflows, and pipeline optimization.
• Extensive experience administering GitLab repositories, merge requests, branching strategies, permissions, source code management, and platform governance.
• Extensive experience developing Infrastructure as Code using Terraform, AWS CloudFormation, or similar technologies.
• Advanced experience deploying containerized applications (Docker, Kubernetes) using Helm, GitOps methodologies, or comparable deployment tools.
• Strong experience developing automation using Bash, Python, or similar scripting languages.
• Experience administering Linux environments supporting CI/CD platforms and software development workflows.
• Experience supporting AWS cloud services and cloud-native application deployments.
• Extensive knowledge of software supply chain security, secrets management, dependency management, secure software development practices, and automated security testing.
• Experience integrating automated testing, quality gates, compliance validation, and security scanning into enterprise CI/CD pipelines.
• Demonstrated ability to contribute to technical initiatives, apply engineering standards, and improve software delivery practices.
• Strong troubleshooting, communication, collaboration, and problem-solving skills.
• Ability to obtain an SF-85 Public Trust suitability determination. [Update for DISA clearance requirements.]
• US Citizenship.

Preferred Qualifications

• Experience supporting DoD or other Federal software development programs.
• Experience supporting DevSecOps initiatives in large Agile or SAFe software development organizations.
• Experience implementing enterprise GitOps deployment methodologies using GitLab and Kubernetes.
• Experience with GitLab Ultimate Security, SonarQube, Checkmarx, Veracode, Snyk, Trivy, or similar security analysis platforms.
• Experience administering GitLab Container Registry, Nexus Repository Manager, Artifactory, or comparable artifact management platforms.
• Experience supporting cloud-native application development using Kubernetes and AWS.
• Experience implementing automated testing, deployment approvals, quality gates, compliance validation, and release governance within CI/CD pipelines.
• AWS, GitLab, Kubernetes, Terraform, or comparable industry certifications.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.