DevSecOps Engineer Principal

GDIT is a technology and professional services company delivering technology solutions and mission services to government, defense, and intelligence organizations. The Principal DevSecOps Engineer will design, automate, and secure infrastructure and deployment pipelines for mission-critical enterprise and AI workloads, integrating security controls across CI/CD, cloud infrastructure, and Infrastructure as Code. The role also supports containerized workloads, compliance automation, operational troubleshooting, documentation, and technical mentoring.

Responsibilities:

• Develop Python, Bash, or other approved scripts to automate recurring infrastructure, application, and security operations activities
• Develop and maintain Ansible playbooks supporting infrastructure and application administration
• Use GitLab or other approved source control/CI-CD tools to maintain automation code, configuration, documentation, and version history
• Identify manual processes that can be standardized, simplified, or automated
• Develop automated system and application health checks and validation processes
• Support integration among infrastructure platforms using APIs, scripts, structured data, and other approved interfaces
• Architect and automate security workflows across CI/CD pipelines and compliance operations, reducing manual effort in vulnerability scan analysis, security inventory auditing, and continuous monitoring reporting
• Integrate security controls into CI/CD pipelines using DevSecOps best practices, including automated vulnerability scans, secrets management, and compliance checks
• Partner with development and platform teams to integrate, automate, and monitor security tool components (scan ingestion, finding triage, evidence generation) within automated pipelines
• Build automation for compliance and audit-readiness artifacts, including continuous monitoring reports and control evidence mapping against NIST 800-53 and FedRAMP requirements
• Perform automated inventory delta analysis and drift detection to maintain an accurate, auditable security posture
• Design, implement, and maintain secure cloud infrastructure using Infrastructure as Code tooling (Ansible and Terraform) and GitLab CI/CD
• Support deployment, management, and optimization of containerized/orchestrated workloads (e.g., Kubernetes/EKS) supporting enterprise and AI workloads
• Support MLOps/AIOps platform automation for AI/ML model deployment, monitoring, and lifecycle management as needed
• Work with network monitoring and Linux administrators to automate recurring operational activities
• Troubleshoot data flows and integrations between monitoring, event management, infrastructure management, and IT service management technologies
• Support application upgrades, maintenance, configuration changes, vulnerability remediation, and troubleshooting
• Participate in root cause analysis involving multiple systems or technical interfaces
• Maintain architecture documentation, interface documentation, automation repositories, operating procedures, and troubleshooting guides
• Mentor junior/mid-level engineers and serve as a technical resource for the team
• Participate in cross training, business hours operational support, and scheduled on-call support

Requirements:

• CI/CD, Cloud Engineering, DevSecOps, Kubernetes
• 8 + years of related experience
• Yes
• BA/BS or equivalent experience
• 8+ years of professional experience in one or more of the following: systems administration, infrastructure engineering, infrastructure automation, DevOps/DevSecOps, systems integration, cloud engineering, or enterprise application support
• At least 2 years of hands-on experience with Linux, scripting, automation, or systems integration in production enterprise environments
• Demonstrated experience implementing DevSecOps practices, including container security, secrets management, and vulnerability remediation
• Knowledge of NIST 800-53, FedRAMP, or comparable security compliance frameworks, and experience supporting internal/external audits
• Python
• Bash or Shell scripting
• Ansible
• Git or GitLab / CI-CD tooling
• Linux administration
• REST APIs
• Infrastructure as Code (Terraform/OpenTofu or similar)
• Configuration management / enterprise monitoring
• Active DoD Secret clearance at time of hire, and must maintain active clearance
• Strong interest in solving operational problems through automation
• Ability to understand relationships between applications, infrastructure, interfaces, and data flows
• Strong troubleshooting and analytical skills
• Ability to learn unfamiliar technologies quickly
• Initiative to identify and implement improvements
• Ability to work across systems, networking, cybersecurity, monitoring, and application teams
• Effective communication skills, able to document solutions and bridge technical concepts with program stakeholders
• 40
• 10-25%
• Experience with Ansible and Terraform in production automation pipelines
• Python development or scripting depth
• REST API integration, SNMP, syslog, JSON, YAML, TCP/IP
• Experience with cloud platforms (AWS preferred) and container orchestration (EKS or similar)
• Experience with security scanning/posture tools or observability tooling (Prometheus, Grafana, CloudWatch, Splunk)
• Experience with Generative AI, MLOps/AIOps platforms
• Infrastructure as code governance, policy-as-code, and Zero Trust/IAM concepts
• Classified, disconnected, or air-gapped environment experience
• Technical certification such as RHCSA/RHCE, Red Hat Ansible certification, CCNA, GitLab certification, an AWS certification (DevOps Engineer or Security Specialty), or equivalent