Senior DevSecOps Engineer

Job Title: Senior DevSecOps Engineer Job Category: Engineering Time Type: Full time Minimum Clearance Required to Start: TS/SCI with Polygraph Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Continental US The Opportunity As part of the Clairvoyant program, you will build and support the backbone of a mission‑critical, cloud‑native ecosystem—a scalable software‑hosting and data‑dissemination platform designed to accelerate the deployment of advanced analytics. You will bridge complex mission requirements and high‑performance automated infrastructure, owning everything from secure pipeline design to cloud resource optimization. As a DevOps / Infrastructure / DevSecOps Engineer on an AWS‑based, Kubernetes‑native environment, you will: Architect Resilience: Design and maintain scalable RKE2/Kubernetes infrastructure on AWS with high availability and fault tolerance. Orchestrate Delivery: Build and refine CI/CD pipelines using GitLab CI/CD, ArgoCD, Jenkins, and Helm for seamless code‑to‑cloud transitions. Secure the Stack: Integrate automated security scanning (Trivy, SonarQube) and enforce compliance with government security standards throughout the development lifecycle. Optimize Performance: Identify bottlenecks and engineer solutions across cloud and container environments, from cluster tuning to artifact management. Responsibilities Develop features to automate, scale, test, and secure a Kubernetes‑based infrastructure running on AWS with RKE2. Build, optimize, and maintain CI/CD pipelines using GitLab CI/CD, Jenkins, and ArgoCD, supporting automated build, test, scan, and deployment workflows. Author, template, and manage Helm charts for application and infrastructure deployment across multiple environments. Build and maintain hardened Docker container images, including STIG‑compliant base images, optimized Dockerfiles, and integration with Harbor and CI/CD pipelines. Manage and scale RKE2 Kubernetes clusters, including workload scheduling, networking, RBAC, secrets management, and cluster lifecycle operations. Administer Harbor (container registry) and Nexus (artifact repository), ensuring availability, security, and pipeline integration. Integrate Trivy and SonarQube into pipelines; remediate findings in coordination with security stakeholders. Enhance performance monitoring; identify bottlenecks and optimize cloud infrastructure and resource utilization. Author Python and Bash automation scripts to reduce toil and support infrastructure lifecycle management. Maintain technical documentation, runbooks, and architecture diagrams. Qualifications Required: Current TS/SCI clearance with Polygraph. Bachelor's degree in Computer Science or related field, or equivalent experience. 3+ years (mid‑level) or 6+ years (senior‑level) in DevOps, Infrastructure, or DevSecOps in a cloud environment. Advanced proficiency in Python and/or Bash scripting for automation and operational support. Strong Linux/Unix command line proficiency, preferably on RHEL‑based systems. Experience building and maintaining CI/CD pipelines using GitLab CI/CD, Jenkins, ArgoCD, and Helm. Strong proficiency with Docker—writing Dockerfiles, building hardened images, and integrating builds into pipelines. Hands‑on Kubernetes experience—cluster operations, workload management, RBAC, networking, troubleshooting. Familiarity with agile methodologies and ability to operate effectively within a distributed team. Ability to travel up to 5% of time. Desired Experience with AWS services and cloud‑native infrastructure patterns. Hands‑on experience with Terraform for cloud resource provisioning and IaC. Experience with RKE2 or other enterprise Kubernetes distributions in air‑gapped or restricted environments. Familiarity with Harbor, Nexus, Trivy, and SonarQube in a pipeline context. Experience with Cilium for Kubernetes network policy and cluster networking. Experience with Packer or Ansible for image and configuration management. Relevant certifications: CKA/CKAD/CKS, AWS DevOps Professional, or CompTIA Security+. Pay Range There are a host of factors that can influence final salary, including geographic location, federal contract labor categories, prior work experience, specific skills and competencies, education, and certifications. We offer competitive compensation, benefits, and learning and development opportunities, including healthcare, wellness, financial, retirement, family support, continuing education, and paid time off. The proposed salary range for this position is $113,200 - $237,800. CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic. #J-18808-Ljbffr CACI International Inc