Description
Leidos is seeking a skilled Sr DevSecOps Engineer to lead efforts in automating and optimizing our cloud integration pipelines for the Passenger Systems Program Directorate (PSPD) within Customs and Border Protection (CBP), supporting DHS’s mission-critical traveler screening systems. This full-time role is pivotal in advancing DevOps across the organization including CI/CD, ZeroTrust, enhanced automation, and ensuring secure software solutions through AWS EKS expertise, vulnerability remediation, and a “shift-left” security approach. Collaborating with agile teams and stakeholders, you’ll drive innovation in cloud transformation while enjoying a hybrid work arrangement with occasional on-site meetings in Ashburn, VA.
This position REQUIRES the candidate to be in Ashburn, VA, twice a week

MINIMUM QUALIFICATIONS:

• BA/BS with 12+ years of relevant experience or 10+ years of relevant experience with Master’s Degree
• Must be able to maintain and obtain a CBP Background Investigation prior to start
• Proven experience as a Senior DevSecOps Engineer or similar leadership role with a strong focus on security.
• Expertise in AWS cloud infrastructure, specifically with AWS EKS and container orchestration.
• Proficiency in designing and implementing secure CI/CD pipelines using Harness and Rafay.
• Deep understanding of security best practices, including threat modeling, risk assessment, and vulnerability management.
• Experience with automated security tools (Anchore, Twistlock, etc.) and security scanning tools.
• Strong knowledge of container runtime and management principles and best practices for securing Kubernetes environments.
• Familiarity with Infrastructure as Code (IaC) principles and automation tools (e.g., Ansible, Terraform, CloudFormation).
• Proficiency in scripting languages like Python or Bash.
• Excellent problem-solving, analytical, and critical thinking skills.
• Strong communication and collaboration skills, with the ability to work effectively across cross-functional teams.

PREFERRED QUALIFICATION:

• Relevant certifications such as Certified DevSecOps Professional (CDP) or Certified Information Systems Security Professional (CISSP).
• Experience with various compliance frameworks and regulations (e.g., PCI-DSS, HIPAA, GDPR).
  At Leidos, we don’t want someone who “fits the mold"—we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, “what’s next?” before the dust settles on “what’s now.”
  If you’re already scheming step 20 while everyone else is still debating step 2… good. You’ll fit right in.

• Design, implement, and maintain secure CI/CD pipelines utilizing AWS EKS, Rafay, and Harness.
• Architect and implement solutions within the AWS EKS environment, leveraging native AWS services (Lambda, SNS, SQS, etc. ) and third-party tools.
• Conduct proactive threat modeling and risk assessments to identify potential vulnerabilities and define mitigation strategies.
• Implement automated security and vulnerability scanning within the CI/CD pipeline and for containerized applications (Anchore, Twistlock, etc.).
• Drive the remediation of security vulnerabilities, collaborating with development and operations teams to implement effective solutions.
• Manage sensitive data securely using appropriate tools like AWS Secrets Manager or HashiCorp Vault.
• Enahance security monitoring, logging, and alerting systems to detect and respond to security incidents promptly.
• Participate in limited incident response activities, including root cause analysis and implementing preventative measures.
• Evaluate and recommend new security tools and technologies to enhance the security posture.
• Stay up-to-date with the latest tools and security trends, threats, and vulnerabilities, and proactively educate the team.