Lead DevSecOps Engineer

Leidos is a company supporting mission-critical systems and national infrastructure, including air traffic management capabilities. The Lead DevSecOps Engineer will support development of the Leidos Common Automation Platform by building CI/CD pipelines, managing cloud-native infrastructure and environments, integrating security controls, and improving platform reliability and developer experience.

Responsibilities:

• Build and maintain CI/CD pipelines enabling continuous integration, testing, and delivery for L-CAP
• Manage Kubernetes clusters and container orchestration for platform service deployments
• Develop and maintain infrastructure-as-code (IaC) using Terraform for repeatable environments
• Integrate security scanning tools (SAST, DAST, SCA) into CI/CD pipelines for shift-left security
• Manage container images, registries, and deployment artifacts across environments
• Automate operational tasks including provisioning, scaling, and configuration management
• Manage development, test, and production environments ensuring consistency and reliability
• Implement monitoring, logging, and alerting solutions for platform observability
• Collaborate with development teams to improve build times, deployment frequency, and reliability
• Support incident response and troubleshooting of infrastructure and deployment issues
• Implement software supply chain security controls including SBOM generation, artifact signing, and dependency vulnerability scanning
• Manage artifact repositories and build provenance ensuring integrity of software deliverables throughout the pipeline
• Support developer platform capabilities including self-service environment provisioning, documentation, and developer experience improvements
• Embrace an AI-first engineering culture by actively adopting AI-assisted development tools, automation, and modern engineering practices that improve productivity, code quality, and delivery velocity

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related discipline with 4 or more years of experience (or Master's degree with 2 or more years of experience) or equivalent experience in lieu of degree
• Experience building and maintaining CI/CD pipelines (Jenkins, GitLab CI, or GitHub Actions)
• Hands-on experience with Kubernetes cluster management and container orchestration
• Proficiency with Terraform or equivalent infrastructure-as-code tools
• Strong experience with Docker and containerization technologies
• Solid Linux systems administration skills
• Proficiency in scripting languages (Bash, Python) for automation
• Experience with security scanning tools and DevSecOps practices
• Understanding of networking, load balancing, and service mesh concepts
• Familiarity with Agile/SAFe delivery and DevOps culture
• Experience with software supply chain security tools (Sigstore, SLSA, SBOM generation)
• Knowledge of artifact management systems and build provenance tracking
• Experience supporting internal developer platforms and developer experience initiatives
• Ability to obtain and maintain a Public Trust
• U.S. citizenship required
• Successful completion of background investigations as required by the government customer
• Experience with cloud platforms (AWS, Azure) including GovCloud environments
• Knowledge of FedRAMP or government compliance requirements
• Experience with monitoring tools (Prometheus, Grafana, ELK stack)
• Familiarity with service mesh technologies (Istio, Linkerd)
• Experience with GitOps workflows and tools (ArgoCD, Flux)
• Knowledge of secrets management and PKI (Vault, cert-manager)
• Experience in aviation, defense, or government program environments
• Experience with developer portal implementation (Backstage or equivalent) and platform documentation
• Desired but not required: Commutable distance (1 hour or less) to Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ