DevSecOps Engineer Principal

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Secret

Clearance Level Must Be Able to Obtain:

Secret

Public Trust/Other Required:

None

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

CI/CD, Cloud Engineering, DevSecOps, Kubernetes Certifications:

None Experience:

8 + years of related experience US Citizenship Required:

Yes

Job Description:

Job Description Summary

GDIT is seeking a DevSecOps Engineer Principal to design, automate, and secure infrastructure and deployment pipelines supporting mission-critical enterprise and AI workloads. This role blends hands-on automation development working directly with scripting, Ansible, Terraform, and CI/CD, with security compliance engineering across DevSecOps pipelines, cloud infrastructure, and Infrastructure as Code. You'll work alongside engineering, security, and platform teams to shift operations from manual and reactive to automated and proactive.

How a DevSecOps Engineer Principal Will Make an Impact

Automation Development

• •Develop Python, Bash, or other approved scripts to automate recurring infrastructure, application, and security operations activities
• •Develop and maintain Ansible playbooks supporting infrastructure and application administration
• •Use GitLab or other approved source control/CI-CD tools to maintain automation code, configuration, documentation, and version history
• •Identify manual processes that can be standardized, simplified, or automated
• •Develop automated system and application health checks and validation processes
• •Support integration among infrastructure platforms using APIs, scripts, structured data, and other approved interfaces

DevSecOps & Pipeline Security

• •Architect and automate security workflows across CI/CD pipelines and compliance operations, reducing manual effort in vulnerability scan analysis, security inventory auditing, and continuous monitoring reporting
• •Integrate security controls into CI/CD pipelines using DevSecOps best practices, including automated vulnerability scans, secrets management, and compliance checks
• •Partner with development and platform teams to integrate, automate, and monitor security tool components (scan ingestion, finding triage, evidence generation) within automated pipelines
• •Build automation for compliance and audit-readiness artifacts, including continuous monitoring reports and control evidence mapping against NIST 800-53 and FedRAMP requirements
• •Perform automated inventory delta analysis and drift detection to maintain an accurate, auditable security posture

Cloud & Infrastructure as Code

• •Design, implement, and maintain secure cloud infrastructure using Infrastructure as Code tooling (Ansible and Terraform) and GitLab CI/CD
• •Support deployment, management, and optimization of containerized/orchestrated workloads (e.g., Kubernetes/EKS) supporting enterprise and AI workloads
• •Support MLOps/AIOps platform automation for AI/ML model deployment, monitoring, and lifecycle management as needed

Operations & Documentation

• •Work with network monitoring and Linux administrators to automate recurring operational activities
• •Troubleshoot data flows and integrations between monitoring, event management, infrastructure management, and IT service management technologies
• •Support application upgrades, maintenance, configuration changes, vulnerability remediation, and troubleshooting
• •Participate in root cause analysis involving multiple systems or technical interfaces
• •Maintain architecture documentation, interface documentation, automation repositories, operating procedures, and troubleshooting guides
• •Mentor junior/mid-level engineers and serve as a technical resource for the team
• •Participate in cross training, business hours operational support, and scheduled on-call support

What You'll Need to Succeed

Required Experience:

• •BA/BS or equivalent experience
• •8+ years of professional experience in one or more of the following: systems administration, infrastructure engineering, infrastructure automation, DevOps/DevSecOps, systems integration, cloud engineering, or enterprise application support
• •At least 2 years of hands-on experience with Linux, scripting, automation, or systems integration in production enterprise environments
• •Demonstrated experience implementing DevSecOps practices, including container security, secrets management, and vulnerability remediation
• •Knowledge of NIST 800-53, FedRAMP, or comparable security compliance frameworks, and experience supporting internal/external audits

Required Technical Skills (hands-on experience with at least two of the following):

• •Python
• •Bash or Shell scripting
• •Ansible
• •Git or GitLab / CI-CD tooling
• •Linux administration
• •REST APIs
• •Infrastructure as Code (Terraform/OpenTofu or similar)
• •Configuration management / enterprise monitoring

Clearance:

Active DoD Secret clearance at time of hire, and must maintain active clearance

Preferred Qualifications:

• •Experience with Ansible and Terraform in production automation pipelines
• •Python development or scripting depth
• •REST API integration, SNMP, syslog, JSON, YAML, TCP/IP
• •Experience with cloud platforms (AWS preferred) and container orchestration (EKS or similar)
• •Experience with security scanning/posture tools or observability tooling (Prometheus, Grafana, CloudWatch, Splunk)
• •Experience with Generative AI, MLOps/AIOps platforms
• •Infrastructure as code governance, policy-as-code, and Zero Trust/IAM concepts
• •Classified, disconnected, or air-gapped environment experience
• •Technical certification such as RHCSA/RHCE, Red Hat Ansible certification, CCNA, GitLab certification, an AWS certification (DevOps Engineer or Security Specialty), or equivalent

What Will Make You Successful:

• •Strong interest in solving operational problems through automation
• •Ability to understand relationships between applications, infrastructure, interfaces, and data flows
• •Strong troubleshooting and analytical skills
• •Ability to learn unfamiliar technologies quickly
• •Initiative to identify and implement improvements
• •Ability to work across systems, networking, cybersecurity, monitoring, and application teams
• •Effective communication skills, able to document solutions and bridge technical concepts with program stakeholders

• GDIT IS YOUR PLACE
• At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• •Growth: AI-powered career tool that identifies career steps and learning opportunities
• •Support: An internal mobility team focused on helping you achieve your career goals
• •Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• •Flexibility: Full-flex work week to own your priorities at work and at home
• •Community: Award-winning culture of innovation and a military-friendly workplace

• OWN YOUR OPPORTUNITY
• Explore a career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your ambition to deliver your best work.

The likely salary range for this position is $136,000 - $184,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

10-25%

T elecommuting Options:

Remote

Work Location:

Any Location / Remote

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal