AWS DevSecOps Engineer

Description

Leidos has a new and exciting opportunity for a DevSecOps Engineer in Fort Belvoir, VA.

We are seeking an experienced AWS DevSecOps Engineer to join our high-performing Agile team, you will design, implement, and support secure, scalable cloud infrastructure. You'll apply DevOps best practices and cloud-native design principles, leveraging AWS services and Infrastructure to drive automation and continuous delivery across environments.

This role also includes hands-on work with automated testing, deployments, and infrastructure monitoring-alongside participation in Agile ceremonies, risk mitigation activities, and collaborative solution design. Cross-functional flexibility across systems engineering, software development, testing, and security is highly valued.

Primary Responsibilities:

• Design and secure scalable AWS cloud environments.
• Manage and optimize Apache/Tomcat platforms for Java applications and provide technical support for ArcGIS solutions.
• Administer and maintain Windows Server 2019 environments, including system optimization and hardening.
• Integrate security and monitoring tools (ACAS, Splunk, SAST/DAST) into automated CI/CD pipelines.
• Automate infrastructure provisioning and deployments with Terraform and Ansible.
• Build and optimize GitLab CI/CD pipelines for rapid, reliable delivery.
• Ensure compliance with security standards and champion DevSecOps best practices across all environments.

• Bachelor's degree with 8+ years of relevant experience or a Master's degree with 6+ years of relevant experience. Additional experience may be considered in lieu of a degree.
• Active DoD SECRET clearance and the ability to obtain a TS/SCI security clearance.
• 5+ years of experience designing, deploying, and securing AWS cloud environments, with strong knowledge of core services (EC2, S3, VPC, IAM, CloudFormation), security services (CloudTrail, GuardDuty, AWS Config, Security Hub), and CI/CD services (CodePipeline, CodeBuild, CodeDeploy).
• Proficiency in managing Apache/Tomcat servers for Java applications, including configuration, performance tuning, patching, and troubleshooting; working knowledge of ArcGIS administration.
• Strong background administering Windows Server 2019, including Active Directory, Group Policy, DNS/DHCP, and patch management.
• Hands-on experience integrating security and monitoring tools into CI/CD pipelines, including ACAS for vulnerability management, Splunk for log aggregation/monitoring, and SAST/DAST tools for secure code scanning.
• Proficiency in infrastructure-as-code (IaC) and automation using Terraform (modules, state management, remote backends) and Ansible (playbooks, roles, and configuration management).
• Experience building and optimizing GitLab CI/CD pipelines, including branching strategies, runners, automated testing, and deployment to multi-tier environments.
• Solid understanding of compliance standards (e.g., NIST 800-53, FedRAMP, DoD STIGs), secure coding practices, and industry best practices in DevSecOps.
• Strong troubleshooting, documentation, and scripting skills (Python, Bash, or PowerShell).

• Active TS/SCI clearance.
• AWS professional-level certifications (e.g. AWS Certified Solutions Architect, AWS Certified DevOps Engineer).
• Experience with containerization and orchestration technologies, including Docker and Kubernetes (K8), in production environment.
• Advanced experience with STIG implementation and RMF compliance processes.