AWS DevSecOps Engineer - Military veterans preferred

Description

Leidos has a new and exciting opportunity for a DevSecOps Engineer in Fort Belvoir, VA.

We are seeking an experienced AWS DevSecOps Engineer to join our high-performing Agile team, you will design, implement, and support secure, scalable cloud infrastructure. You'll apply DevOps best practices and cloud-native design principles, leveraging AWS services and Infrastructure to drive automation and continuous delivery across environments.

This role also includes hands-on work with automated testing, deployments, and infrastructure monitoring—alongside participation in Agile ceremonies, risk mitigation activities, and collaborative solution design. Cross-functional flexibility across systems engineering, software development, testing, and security is highly valued.

Primary Responsibilities:

• Design and secure scalable AWS cloud environments.
• Manage and optimize Apache/Tomcat platforms for Java applications and provide technical support for ArcGIS solutions.
• Administer and maintain Windows Server 2019 environments, including system optimization and hardening.
• Integrate security and monitoring tools (ACAS, Splunk, SAST/DAST) into automated CI/CD pipelines.
• Automate infrastructure provisioning and deployments with Terraform and Ansible.
• Build and optimize GitLab CI/CD pipelines for rapid, reliable delivery.
• Ensure compliance with security standards and champion DevSecOps best practices across all environments.

Basic Qualifications:

• Bachelor's degree with 8+ years of relevant experience or a Master's degree with 6+ years of relevant experience. Additional experience may be considered in lieu of a degree.
• Active DoD SECRET clearance and the ability to obtain a TS/SCI security clearance.
• 5+ years of experience designing, deploying, and securing AWS cloud environments, with strong knowledge of core services (EC2, S3, VPC, IAM, CloudFormation), security services (CloudTrail, GuardDuty, AWS Config, Security Hub), and CI/CD services (CodePipeline, CodeBuild, CodeDeploy).
• Proficiency in managing Apache/Tomcat servers for Java applications, including configuration, performance tuning, patching, and troubleshooting; working knowledge of ArcGIS administration.
• Strong background administering Windows Server 2019, including Active Directory, Group Policy, DNS/DHCP, and patch management.
• Hands-on experience integrating security and monitoring tools into CI/CD pipelines, including ACAS for vulnerability management, Splunk for log aggregation/monitoring, and SAST/DAST tools for secure code scanning.
• Proficiency in infrastructure-as-code (IaC) and automation using Terraform (modules, state management, remote backends) and Ansible (playbooks, roles, and configuration management).
• Experience building and optimizing GitLab CI/CD pipelines, including branching strategies, runners, automated testing, and deployment to multi-tier environments.
• Solid understanding of compliance standards (e.g., NIST 800-53, FedRAMP, DoD STIGs), secure coding practices, and industry best practices in DevSecOps.
• Strong troubleshooting, documentation, and scripting skills (Python, Bash, or PowerShell).

Preferred Qualifications:

• Active TS/SCI clearance.
• AWS professional-level certifications (e.g. AWS Certified Solutions Architect, AWS Certified DevOps Engineer).
• Experience with containerization and orchestration technologies, including Docker and Kubernetes (K8), in production environment.
• Advanced experience with STIG implementation and RMF compliance processes.

EIO2024

At Leidos, we don’t want someone who "fits the mold"—we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, “what’s next?” before the dust settles on “what’s now.”

If you’re already scheming step 20 while everyone else is still debating step 2… good. You’ll fit right in.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.