DevSecOps Lead Engineer

DevSecOps Lead Engineer Job #: R-00180573 Location: Reston, Virginia Category: Software Engineering Schedule (FT/PT): Full Time Travel Required: No Shift: Day Remote Type: No Remote Clearance: Secret External Referral Program: Ineligible Sector: Defense Looking for an opportunity to make an impact? At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business. Your greatest work is ahead! Leidos’ Defense Systems Uncrewed Systems Integration and Test is seeking a motivated and ambitious DevSecOps Lead Engineer to join the Software, Simulation, Systems Engineering and Integration Directorate (S3I) Joint Technology Center – Systems Integration Lab (JSIL) Technology and Certification Center.  This position collaborates with subject matter experts in the requirements, design, development, security and implementation of UAS related software If this sounds like the kind of environment where you can thrive, keep reading! Leidos Defense Systems Sector provides a diverse portfolio of systems, solutions, and services covering land, sea, air, space, and cyberspace for customers worldwide. Solutions for Defense include enterprise and mission IT, large-scale intelligence systems, command and control, geospatial and data analytics, cybersecurity, logistics, training, and intelligence analysis and operations support. Our team is solving the world’s toughest security challenges for customers with “can’t fail” missions. To explore and learn more, click here! Are you ready to make an impact? your resume with us today! Primary Responsibilities Lead the design, implementation, and continuous improvement of DevSecOps pipelines and practices across the organization Integrate security controls and automated testing into CI/CD pipelines (SAST, DAST, SCA, container scanning) Establish and enforce secure software development lifecycle (SDLC) standards and best practices Collaborate with software engineering, cybersecurity, and integration teams to embed security into all phases of development Drive adoption of Infrastructure as Code (IaC) and immutable infrastructure principles Oversee containerization and orchestration strategies using Docker Implement and manage secrets management, identity and access controls (IAM), and zero-trust security models Ensure compliance with applicable security frameworks and standards (e.g., NIST, RMF, etc.) Mentor and guide engineers on DevSecOps principles, secure coding practices, and automation strategies Evaluate, select, and integrate new tools and technologies to improve security, automation, and delivery speed Partner with leadership to define DevSecOps strategy, roadmap, and metrics for success Support audit and accreditation activities, including documentation and evidence collection Drive a culture of d responsibility for security, reliability, and performance across teams Basic Qualifications BS degree and 8 – 12 years of prior relevant experience or MS with 6 – 10 years of prior relevant experience. May possess a Doctorate in technical domain 3+ years of experience in software engineering, DevOps, or DevSecOps roles, and 1-2 years in a technical leadership position On-site work (no remote/hybrid options) Ability to obtain and maintain a Security+ Certification Strong hands-on experience designing and implementing CI/CD pipelines using tools such as Jenkins, GitLab CI/CD, GitHub Actions, or similar Proven experience integrating security practices into the software development lifecycle (SDLC), including SAST, DAST, dependency scanning, and container security Experience with Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, or Pulumi Proficiency in containerization and orchestration technologies (Docker, Kubernetes) Strong knowledge of security frameworks and compliance standards (e.g., NIST, RMF, SCAP, STIGs, etc.) Experience implementing identity and access management (IAM), secrets management, and zero-trust architectures Solid scripting and automation skills in languages such as Python, Bash, or PowerShell Demonstrated ability to lead technical teams, mentor engineers, and drive DevSecOps culture across an organization Experience working in Agile/Scrum environments and collaborating with cross-functional teams Excellent problem-solving skills and ability to operate in fast-paced, mission-critical environments Strong understanding of Linux operating systems, including system administration, troubleshooting, and performance tuning. Must be a US citizen and able to obtain and maintain a Final Secret Clearance Must be a resident of Huntsville, AL or willing to relocate to the Huntsville, AL area, Preferred Qualifications IAT Level II or Linux OS based certification If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares. Original Posting: For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.