Senior DevSecOps Engineer

CACI International Inc

. Deploy, configure, and sustain Kubernetes-based platforms and mission applications using Big Bang, Helm, and GitOps deployment practices .

Posted 10/5/2026full-timeRemote • United StatesSenior💰 $98,500 - $206,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in deploying and managing Kubernetes-based platforms, utilizing Terraform for Infrastructure as Code, and implementing secure CI/CD pipelines. Proficient in security compliance frameworks such as DISA STIGs and NIST 800-53, with a strong focus on DevSecOps practices.

Highest-signal resume keywords

Kubernetes DeploymentTerraform Infrastructure as CodeCI/CD Pipeline OptimizationGitOps WorkflowsSecurity Compliance Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

TerraformKubernetesCI/CDPythonBashPowerShellGoAWSGitDevSecOps

Tools & Technologies

Big BangHelmArgo CDFluxGitLabGitHubACASTwistlockPrisma CloudCAC Authentication

Certifications & Qualifications

CKACKADCKSHashiCorp Terraform AssociateAWS CertificationsSecurity+CISSPCCSP

Industry Keywords

DISA STIGsNIST 800-53RMFATO ProcessesPOA&M ManagementContinuous MonitoringCloud EngineeringPlatform EngineeringSREMicroservices

Tech Stack

Tools & technologies

AWSCloudEC2FluxKubernetesMicroservicesPythonTerraformGo

About the role

Key responsibilities & impact

Deploy, configure, and sustain Kubernetes-based platforms and mission applications using Big Bang, Helm, and GitOps deployment practices
Develop and maintain Terraform-based Infrastructure as Code for cloud infrastructure, Kubernetes resources, networking, IAM, and platform services
Build, secure, and optimize CI/CD pipelines for application and infrastructure delivery, including reusable pipeline templates, automated testing, and controlled release promotion
Triage, prioritize, remediate, and validate infrastructure, container, and application security findings according to vulnerability-management SLAs
Implement and maintain hardened Kubernetes and cloud configuration baselines aligned with DISA STIGs, NIST 800-53, RMF, and organizational security requirements
Manage Kubernetes security controls, including RBAC, network policies, pod security standards, admission controls, secrets management, and secure ingress/egress configurations
Maintain GitOps workflows using Git as the authoritative source for infrastructure and platform configuration
Monitor CI/CD platforms, runners, deployments, and Kubernetes workloads; troubleshoot build, deployment, performance, and availability issues
Develop automated patching, configuration management, and compliance-validation processes
Produce security and operational documentation, including architecture diagrams, implementation procedures, scan evidence, remediation plans, and POA&M updates
Support RMF and ATO lifecycle activities by collecting control evidence, addressing assessment findings, and maintaining continuous-monitoring artifacts
Support DoD/AF customers in delivering, securing, and operating cloud-native enterprise platforms

Requirements

What you’ll need

U.S. Citizen with eligibility for Secret Clearance
At least 7 years of relevant professional experience with a related degree
Strong experience developing and maintaining Terraform modules and reusable Infrastructure as Code patterns for cloud, network, and Kubernetes resources
Experience implementing GitOps workflows with tools such as Argo CD, Flux, GitLab, GitHub, or similar platforms
3–5 years of experience designing and deploying Kubernetes-based solutions; Big Bang is a plus
Experience with CI/CD pipelines, containerization, and secure DevSecOps practices
Strong familiarity with DISA STIGs, RMF, NIST SP 800-53, ATO processes, POA&M management, continuous monitoring, and security compliance evidence generation
Desired: 5–10 years of experience in DevSecOps, platform engineering, cloud engineering, SRE, or software delivery roles
Experience with CAC authentication, PIV tokens, and client-side PKI certificate handling
Experience with AWS cloud services, including EKS, IAM, VPC, EC2, S3, Route 53, CloudWatch, load balancers, and security services
Proficiency in Python, Bash, PowerShell, Go, or similar languages for automation, tooling, and operational support
Relevant certifications such as CKA, CKAD, CKS, HashiCorp Terraform Associate, AWS certifications, Security+, CISSP, or CCSP
Experience with ATO/accreditation processes
Familiarity with scanning and compliance tools like RMF, ACAS, Twistlock, Prisma Cloud
Proven ability to work across multi-tenant identity services, supporting thousands of users and integrating with microservices

Benefits

Comp & perks

Flexible time off benefit
Robust learning resources
Healthcare benefits
Wellness benefits
Financial benefits
Retirement benefits
Family support benefits
Continuing education benefits
Time off benefits
Competitive compensation
Learning and development opportunities