DevSecOps Engineer – Intelligent Platforms, Agents

Leidos

. Design, implement, and maintain automated CI/CD pipelines from development through security scanning, compliance validation, and deployment into Navy and DoD environments .

Posted 9/24/2026full-timeRemote • United StatesMid-LevelSenior💰 $107,900 - $195,050 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and maintaining CI/CD pipelines, implementing security and compliance measures in Navy and DoD environments, and leveraging Infrastructure as Code practices. Proficient in Kubernetes administration, automated security scanning, and operational documentation to ensure robust deployment processes.

Highest-signal resume keywords

CI/CD Pipeline DesignKubernetes AdministrationInfrastructure as Code (Terraform)Automated Security ScanningActive Security+ Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CI/CD Pipeline MaintenanceKubernetes HardeningDISA STIG ComplianceSBOM GenerationCVE TriagePython ScriptingBash ScriptingHelm Chart AuthoringSecrets ManagementAI Tooling Utilization

Soft Skills

Independent OperationWorkload ManagementCollaboration

Tools & Technologies

GitLab CITerraformVaultPrometheusGrafana

Certifications & Qualifications

Secret Security ClearanceCertified Kubernetes Administrator (CKA)Active Security+ Certification

Industry Keywords

DevSecOpsDoD ComplianceAir-Gapped EnvironmentsDocumentation as CodeControls-as-Code

Tech Stack

Tools & technologies

CloudGrafanaKubernetesLinuxPrometheusPythonTerraformVault

About the role

Key responsibilities & impact

Design, implement, and maintain automated CI/CD pipelines from development through security scanning, compliance validation, and deployment into Navy and DoD environments
Build and maintain hardened Kubernetes environments aligned to DISA STIG requirements across cloud and restricted network contexts
Automate security artifact generation, including SBOM production, CVE scanning, and continuous compliance validation
Drive adoption of Infrastructure as Code, GitOps, and controls-as-code practices
Leverage AI tooling for pipeline development, vulnerability triage, compliance remediation, and operational documentation
Partner with software engineers, systems engineers, and ISSEs to embed security and compliance requirements from the start of development
Maintain and evolve deployment infrastructure across secure cloud, air-gapped, and intermittently connected environments
Support ATO processes through automated evidence generation, documentation as code, and collaboration with the security team
Establish standards for pipeline design, container security, secrets management, and deployment consistency
Contribute to application feature development when team capacity requires, applying security-first practices
Maintain version-controlled operational documentation, including runbooks, deployment guides, and architecture diagrams

Requirements

What you’ll need

Must have and maintain a Secret security clearance
BS degree and 4+ years of professional DevSecOps or DevOps engineering experience, 8+ years of total relevant experience
Hands-on experience designing and maintaining CI/CD pipelines using GitLab CI
Experience with Kubernetes administration and hardening in DoD or compliance-driven environments; RKE2 or K3S experience strongly preferred
Experience implementing DISA STIG compliance in containerized and Linux environments, including RHEL or Rocky Linux
Proficiency with Infrastructure as Code tooling, particularly Terraform
Experience with Helm chart authoring and Kubernetes deployment management
Experience with automated security scanning, SBOM generation, and CVE triage and remediation
Scripting proficiency in Python or Bash for pipeline and operational automation
Demonstrated use of AI tooling to accelerate engineering workflows
Background contributing to application feature development alongside infrastructure work
Ability to operate independently and manage workload across competing priorities in a small, fast-moving team
Experience operating in air-gapped or disconnected network environments
Experience supporting ATO through automation, documentation, and technical leadership
Active Security+ certification or equivalent IAT Level II certification
Experience with secrets management tooling such as Vault, Sealed Secrets, or SOPS
Familiarity with observability and monitoring tools such as Prometheus or Grafana
Certified Kubernetes Administrator (CKA) or willingness to obtain upon onboarding
Experience applying “as code” approaches beyond infrastructure, such as configuration-as-code, policy-as-code, workflows-as-code, and documentation-as-code