DevSecOps Engineer

Description

Leidos’ High Fidelity Simulation Business Area is responsible for architecting and implementing large-scale System of Systems solutions in support of world class simulation, training, and analysis products for the US Navy. You will get to work with state-of-the art technology developing the most sophisticated and “game changing” trainers the US Navy deploys. You will be constantly learning new skills and be encouraged and supported to develop the career you want to achieve. The hallmark of Leidos is empowered employees doing meaningful work. Join Leidos for a career, not just a job.

Leidos is seeking an energetic, motivated, self-starter for this technically sophisticated and challenging engineering position, developing a variety of naval training and simulation systems such as CIAT - Combined Integrated Air and Missile Defense (IAMD) and Anti-Submarine Warfare (ASW) Trainer - YouTube .

You will serve as an integral part of a development team that is focused on building and maintaining state-of-the-art Simulation Systems for our US Navy customers. You will administer DevSecOps and Configuration Management (CM) practices, tools and techniques for the use by the team, to increase our ability to deliver trainers more quickly and with improved quality. You will be responsible for setting up cloud environments to be used by development teams for continuous integration and development of Navy systems in both the public cloud and on-premises in private clouds. You will work directly with the management team to help standardize these same practices across our entire development group and demonstrate the effectiveness and value of modern DevSecOps and CM to our Navy customers. Come join us as a front-line leader who can help to shape the future of our team and our incredible products

Remote/Telework: This position allows at least 75% remote work. Candidate must be local to the office and able to work onsite as needed to accomplish required tasks for the role.

Core Responsibilities

Kubernetes and Containers

• \n
• Design, deploy, and maintain Kubernetes-based platforms such as AWS EKS and RKE2.\n
• Deploy and manage containerized applications using Docker or Podman.\n
• Develop, maintain, and troubleshoot Helm charts and Kubernetes manifests.\n
• Configure and support Istio service mesh, Kubernetes networking, ingress, service discovery, configmaps, secrets, and workload security.\n

Infrastructure Automation

• \n
• Design, deploy, and maintain infrastructure using OpenTofu or Terraform.\n
• Develop Ansible automation for system configuration, software deployment, patching, and operational tasks.\n
• Build reusable infrastructure modules, automation roles, templates, and deployment patterns.\n
• Apply infrastructure-as-code principles, including version control, peer review, testing, and controlled promotion.\n
• Support infrastructure provisioning and configuration across development, test, and production environments.\n

CI/CD and Software Factory Operations

• \n
• Design, implement, and maintain secure CI/CD pipelines using GitLab and GitLab Runners, or Jenkins.\n
• Integrate automated build, test, security, packaging, and deployment stages.\n
• Install, configure, troubleshoot, and integrate GitLab, GitLab Runners, Jenkins, Keycloak, Red Hat Identity Management or LDAP, Artifactory, Mattermost, Jira, Confluence, and SonarQube.\n
• Establish secure Git workflows, including branching, merge requests, code reviews, tagging, releases, and change control.\n
• Create reusable pipeline templates and shared CI/CD components.\n

DevSecOps and Continuous Authorization

• \n
• Integrate security practices into all stages of the software development lifecycle.\n
• Implement automated static application security testing, software composition analysis, dependency scanning, container image scanning, infrastructure-as-code scanning, secrets detection, license compliance, and software quality gates.\n
• Support secure software supply chain practices, including artifact integrity, provenance, and traceability.\n
• Support cATO, continuous monitoring, and automated compliance evidence collection.\n
• Tran