DevSecOps Engineer Principal

Type of Requisition:
Regular
Clearance Level Must Currently Possess:
Secret
Clearance Level Must Be Able to Obtain:
Secret
Public Trust/Other Required:
None
Job Family:
Cyber and IT Risk Management
Job Qualifications:
Skills:
CI/CD, Cloud Engineering, DevSecOps, Kubernetes
Certifications:
None
Experience:
8 + years of related experience
US Citizenship Required:
Yes
Job Description:
Job Description Summary
GDIT is seeking a DevSecOps Engineer Principal to design, automate, and secure infrastructure and deployment pipelines supporting mission-critical enterprise and AI workloads. This role blends hands-on automation development working directly with scripting, Ansible, Terraform, and CI/CD, with security compliance engineering across DevSecOps pipelines, cloud infrastructure, and Infrastructure as Code. You'll work alongside engineering, security, and platform teams to shift operations from manual and reactive to automated and proactive.
How a DevSecOps Engineer Principal Will Make an Impact
Automation Development
Develop Python, Bash, or other approved scripts to automate recurring infrastructure, application, and security operations activities
Develop and maintain Ansible playbooks supporting infrastructure and application administration
Use GitLab or other approved source control/CI-CD tools to maintain automation code, configuration, documentation, and version history
Identify manual processes that can be standardized, simplified, or automated
Develop automated system and application health checks and validation processes
Support integration among infrastructure platforms using APIs, scripts, structured data, and other approved interfaces
DevSecOps & Pipeline Security
Architect and automate security workflows across CI/CD pipelines and compliance operations, reducing manual effort in vulnerability scan analysis, security inventory auditing, and continuous monitoring reporting
Integrate security controls into CI/CD pipelines using DevSecOps best practices, including automated vulnerability scans, secrets management, and compliance checks
Partner with development and platform teams to integrate, automate, and monitor security tool components (scan ingestion, finding triage, evidence generation) within automated pipelines
Build automation for compliance and audit-readiness artifacts, including continuous monitoring reports and control evidence mapping against NIST 800-53 and FedRAMP requirements
Perform automated inventory delta analysis and drift detection to maintain an accurate, auditable security posture
Cloud & Infrastructure as Code
Design, implement, and maintain secure cloud infrastructure using Infrastructure as Code tooling (Ansible and Terraform) and GitLab CI/CD
Support deployment, management, and optimization of containerized/orchestrated workloads (e.g., Kubernetes/EKS) supporting enterprise and AI workloads
Support MLOps/AIOps platform automation for AI/ML model deployment, monitoring, and lifecycle management as needed
Operations & Documentation
Work with network monitoring and Linux administrators to automate recurring operational activities
Troubleshoot data flows and integrations between monitoring, event management, infrastructure management, and IT service management technologies
Support application upgrades, maintenance, configuration changes, vulnerability remediation, and troubleshooting
Participate in root cause analysis involving multiple systems or technical interfaces
Maintain architecture documentation, interface documentation, automation repositories, operating procedures, and troubleshooting guides
Mentor junior/mid-level engineers and serve as a technical resource for the team
Participate in cross training, business hours operational support, and scheduled on-call support
What You'll Need to Succeed
Required Experience:
BA/BS or equivalent experience
8+ years of professional experience in one or more of the following: systems administration, infrastructure engineering, infrastructure automation, DevOps/DevSecOps, systems integration, cloud engineering, or enterprise application support
At least 2 years of hands-on experience with Linux, scripting, automation, or systems integration in production enterprise environments
Demonstrated experience implementing DevSecOps practices, including container security, secrets management, and vulnerability remediation
Knowledge of NIST 800-53, FedRAMP, or comparable security compliance frameworks, and experience supporting internal/external audits
Required Technical Skills (hands-on experience with at least two of the following):
Python
Bash or Shell scripting
Ansible
Git or GitLab / CI-CD tooling
Linux administration
REST APIs
Infrastructure as Code (Terraform/OpenTofu or similar)
Configuration management / enterprise monitoring
Clearance:
Active DoD Secret clearance at time of hire, and must maintain active clearance
Preferred Qualifications:
Experience with Ansible and Terraform in production automation pipelines
Python development or scripting depth
REST API integration, SNMP, syslog, JSON, YAML, TCP/IP
Experience with cloud platforms (AWS preferred) and container orchestration (EKS or similar)
Experience with security scanning/posture tools or observability tooling (Prometheus, Grafana, CloudWatch, Splunk)
Experience with Generative AI, MLOps/AIOps platforms
Infrastructure as code governance, policy-as-code, and Zero Trust/IAM concepts
Classified, disconnected, or air-gapped environment experience
Technical certification such as RHCSA/RHCE, Red Hat Ansible certification, CCNA, GitLab certification, an AWS certification (DevOps Engineer or Security Specialty), or equivalent
What Will Make You Successful:
Strong interest in solving operational problems through automation
Ability to understand relationships between applications, infrastructure, interfaces, and data flows
Strong troubleshooting and analytical skills
Ability to learn unfamiliar technologies quickly
Initiative to identify and implement improvements
Ability to work across systems, networking, cybersecurity, monitoring, and application teams
Effective communication skills, able to document solutions and bridge technical concepts with program stakeholders
GDIT IS YOUR PLACE
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
Growth: AI-powered career tool that identifies career steps and learning opportunities
Support: An internal mobility team focused on helping you achieve your career goals
Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
Flexibility: Full-flex work week to own your priorities at work and at home
Community: Award-winning culture of innovation and a military-friendly workplace
OWN YOUR OPPORTUNITY
Explore a career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your ambition to deliver your best work.
The likely salary range for this position is $136,000 - $184,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Scheduled Weekly Hours:
40
Travel Required:
10-25%
Telecommuting Options:
Remote
Work Location:
Any Location / Remote
Additional Work Locations:
Total Rewards at GDIT:
Our benefits pac