Senior DevSecOps Engineer

Job Description The Digital Sector at Leidos currently has an opening for a Senior DevSecOps Engineer to support the Department of Veterans Affairs' Office of Information & Technology (OIT). In this contract, Leidos assists with the underlying infrastructure, tools, and operational services used to build, deploy, secure, and run VA health applications. A Senior DevSecOps Engineer provides technical leadership in the architecture, implementation, and optimization of enterprise DevSecOps automation and deployment strategies supporting mission-critical cloud environments. This role requires the ability to design and deliver secure, scalable, resilient, and highly available cloud-native solutions while fostering automation, operational excellence, and continuous improvement across the software development lifecycle (SDLC). Primary Responsibilities The selected candidate will: - Operate and maintain centralized secrets management solutions, ensuring automated rotation of production secrets and the timely rotation of non-automated secrets. - Maintain environment configurations exclusively through approved Infrastructure-as-Code (IaC) tooling and review and approve IaC changes within established turnaround times. - Perform scheduled configuration drift detection and remediating any identified drift within required timelines. - Manage the organization's certificate inventory and lifecycle, ensuring the timely renewal of certificates and the immediate remediation of invalid, expired, or misconfigured certificates. - Support daily Change Control Board (CCB) meetings by preparing and presenting change requests for government approval, develop documented backout and rollback plans, and perform post-implementation production verification testing for all production changes. - Prepare production change notifications and produce weekly change summary reports that document planned and completed changes, incidents, and any deviations from established processes. Basic Qualifications Candidates should possess: - Bachelors degree in Computer Science, Engineering, Information Systems, or a related field. - Minimum of 10 years of experience in DevSecOps, Site Reliability Engineering (SRE), or platform engineering; candidates without a degree must have at least 16 years of relevant experience. - The ability to architect and lead enterprise DevSecOps automation and deployment solutions supporting mission-critical cloud environments. - Experience implementing: CI/CD pipelines, Kubernetes and EKS orchestration, Terraform automation, Container security scanning, Automated scaling, Blue/green deployments, Canary releases, Zero Trust DevSecOps architectures. - The ability to obtain and maintain a Public Trust security clearance. - The ability to travel, as needed, to customer sites. - Must have a US Citizenship. Preferred Qualifications The ideal candidate will bring experience with: - Integrating change management workflows with IT Service Management (ITSM) platforms, such as ServiceNow. - Service mesh technologies, including Istio, in production environments, as well as configuration drift detection and automated remediation tooling. - Facilitating or presenting changes to a CCB and supporting compliance-driven change and configuration management practices in a federal or other highly regulated environment. - Producing recurring compliance or security posture reports, such as software version posture assessments and security exception reporting. - Working with the Department of Veterans Affairs, or a similar government agency.