Full job description

Position Overview

At Leidos, we are advancing mission-critical platforms that simulate, interact with, and act on complex technical and business environments. These platforms enable teams to engage with network operations, automate business processes, and gain insight through intent-driven and agent-based systems.

The team operates with a strong belief in "everything as code," using version-controlled artifacts and automation to manage not only infrastructure and software, but also deployment pipelines, security controls, compliance artifacts, and operational workflows.

The DevSecOps Engineer is a hands-on practitioner responsible for building, automating, and sustaining the delivery infrastructure that enables mission-critical software to move fast without compromising compliance. You will actively build and maintain CI/CD pipelines, harden and manage Kubernetes environments, automate security compliance, and leverage AI as a force multiplier across the entire delivery lifecycle. When team capacity demands it, you will contribute directly to feature development — bringing a security-first perspective to application code.

Primary Responsibilities

Design, implement, and maintain automated CI/CD pipelines that carry code from development through security scanning, compliance validation, and deployment into Navy and DoD environments
Build and maintain hardened Kubernetes environments aligned to DISA STIG requirements across cloud and restricted network deployment contexts
Automate security artifact generation including SBOM production, CVE scanning, and continuous compliance validation
Drive adoption of Infrastructure as Code, GitOps practices, and controls-as-code across the team
Leverage AI tooling to accelerate pipeline development, vulnerability triage, compliance remediation, and operational documentation
Partner closely with software engineers, systems engineers, and ISSEs to embed security and compliance requirements from the start of development
Maintain and evolve deployment infrastructure across multiple secure environments, including cloud and air-gapped or intermittently connected contexts
Support ATO processes through automated evidence generation, documentation as code, and direct collaboration with the security team
Establish and promote standards for pipeline design, container security, secrets management, and deployment consistency
Contribute to feature development when team capacity requires, applying security-first development practices to application code

Original Posting:

Pay Range: