DevSecOps Engineer Principal

Type of Requisition

Regular

Clearance Level Must Currently Possess

Secret

Clearance Level Must Be Able to Obtain

Secret

Public Trust/Other Required

None

Job Family

Cyber and IT Risk Management

Job Qualifications

Skills

CI/CD, Cloud Engineering, DevSecOps, Kubernetes Certifications

None Experience

8 + years of related experience US Citizenship Required

Yes

Job Description

Job Description Summary

GDIT is seeking a DevSecOps Engineer Principal to design, automate, and secure infrastructure and deployment pipelines supporting mission-critical enterprise and AI workloads. This role blends hands-on automation development working directly with scripting, Ansible, Terraform, and CI/CD, with security compliance engineering across DevSecOps pipelines, cloud infrastructure, and Infrastructure as Code. You'll work alongside engineering, security, and platform teams to shift operations from manual and reactive to automated and proactive.

How a DevSecOps Engineer Principal Will Make an Impact

Automation Development

• Develop Python, Bash, or other approved scripts to automate recurring infrastructure, application, and security operations activities
• Develop and maintain Ansible playbooks supporting infrastructure and application administration
• Use GitLab or other approved source control/CI-CD tools to maintain automation code, configuration, documentation, and version history
• Identify manual processes that can be standardized, simplified, or automated
• Develop automated system and application health checks and validation processes
• Support integration among infrastructure platforms using APIs, scripts, structured data, and other approved interfaces

DevSecOps & Pipeline Security

• Architect and automate security workflows across CI/CD pipelines and compliance operations, reducing manual effort in vulnerability scan analysis, security inventory auditing, and continuous monitoring reporting
• Integrate security controls into CI/CD pipelines using DevSecOps best practices, including automated vulnerability scans, secrets management, and compliance checks
• Partner with development and platform teams to integrate, automate, and monitor security tool components (scan ingestion, finding triage, evidence generation) within automated pipelines
• Build automation for compliance and audit-readiness artifacts, including continuous monitoring reports and control evidence mapping against NIST 800-53 and FedRAMP requirements
• Perform automated inventory delta analysis and drift detection to maintain an accurate, auditable security posture

Cloud & Infrastructure as Code

• Design, implement, and maintain secure cloud infrastructure using Infrastructure as Code tooling (Ansible and Terraform) and GitLab CI/CD
• Support deployment, management, and optimization of containerized/orchestrated workloads (e.g., Kubernetes/EKS) supporting enterprise and AI workloads
• Support MLOps/AIOps platform automation for AI/ML model deployment, monitoring, and lifecycle management as needed

Operations & Documentation

• Work with network monitoring and Linux administrators to automate recurring operational activities
• Troubleshoot data flows and integrations between monitoring, event management, infrastructure management, and IT service management technologies
• Support application upgrades, maintenance, configuration changes, vulnerability remediation, and troubleshooting
• Participate in root cause analysis involving multiple systems or technical interfaces
• Maintain architecture documentation, interface documentation, automation repositories, operating procedures, and troubleshooting guides
• Mentor junior/mid-level engineers and serve as a technical resource for the team
• Participate in cross training, business hours operational support, and scheduled on-call support

What You'll Need to Succeed

Required Experience

• BA/BS or equivalent experience
• 8+ years of professional experience in one or more of the following: systems administration, infrastructure engineering, infrastructure automation, DevOps/DevSecOps, systems integration, cloud engineering, or enterprise application support
• At least 2 years of hands-on experience with Linux, scripting, automation, or systems integration in production enterprise environments
• Demonstrated experience implementing DevSecOps practices, including container security, secrets management, and vulnerability remediation
• Knowledge of NIST 800-53, FedRAMP, or comparable security compliance frameworks, and experience supporting internal/external audits

Required Technical Skills (hands-on experience with at least two of the following):

• Python
• Bash or Shell scripting
• Ansible
• Git or GitLab / CI-CD tooling
• Linux administration
• REST APIs
• Infrastructure as Code (Terraform/OpenTofu or similar)
• Configuration management / enterprise monitoring

Clearance

• Active DoD Secret clearance at time of hire, and must maintain active clearance

Preferred Qualifications

• Experience with Ansible and Terraform in production automation pipelines
• Python development or scripting depth
• REST API integration, SNMP, syslog, JSON, YAML, TCP/IP
• Experience with cloud platforms (AWS preferred) and container orchestration (EKS or similar)
• Experience with security scanning/posture tools or observability tooling (Prometheus, Grafana, CloudWatch, Splunk)
• Experience with Generative AI, MLOps/AIOps platforms
• Infrastructure as code governance, policy-as-code, and Zero Trust/IAM concepts
• Classified, disconnected, or air-gapped environment experience
• Technical certification such as RHCSA/RHCE, Red Hat Ansible certification, CCNA, GitLab certification, an AWS certification (DevOps Engineer or Security Specialty), or equivalent

What Will Make You Successful

• Strong interest in solving operational problems through automation
• Ability to understand relationships between applications, infrastructure, interfaces, and data flows
• Strong troubleshooting and analytical skills
• Ability to learn unfamiliar technologies quickly
• Initiative to identify and implement improvements
• Ability to work across systems, networking, cybersecurity, monitoring, and application teams
• Effective communication skills, able to document solutions and bridge technical concepts with program stakeholders

GDIT IS YOUR PLACE

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Flexibility: Full-flex work week to own your priorities at work and at home
• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY

Explore a career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your ambition to deliver your best work.

The likely salary range for this position is $136,000 - $184,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours

40

Travel Required

10-25%

T elecommuting Options

Remote

Work Location

Any Location / Remote

Additional Work Locations

Total Rewards at GDIT