Senior DevSecOps Engineer

Job Title: Senior DevSecOps EngineerJob Category: EngineeringTime Type: Full timeMinimum Clearance Required to Start: TS/SCI with PolygraphEmployee Type: RegularPercentage of Travel Required: Up to 10%Type of Travel: Continental US* * *

The Opportunity:
As part of the Clairvoyant program, you will build and support the backbone of a mission-critical, cloud-native ecosystem — a scalable software-hosting and data-dissemination platform designed to accelerate the deployment of advanced analytics. You will bridge complex mission requirements and high-performance automated infrastructure, owning everything from secure pipeline design to cloud resource optimization. As a DevOps / Infrastructure / DevSecOps Engineer on an AWS-based, Kubernetes-native environment, you will:

• Architect Resilience: Design and maintain scalable RKE2/Kubernetes infrastructure on AWS with high availability and fault tolerance.

• Orchestrate Delivery: Build and refine CI/CD pipelines using GitLab CI/CD, ArgoCD, Jenkins, and Helm for seamless code-to-cloud transitions.

• Secure the Stack: Integrate automated security scanning (Trivy, SonarQube) and enforce compliance with government security standards throughout the development lifecycle.

• Optimize Performance: Identify bottlenecks and engineer solutions across cloud and container environments, from cluster tuning to artifact management.

Responsibilities:

• Develop features to automate, scale, test, and secure a Kubernetes-based infrastructure running on AWS with RKE2.

• Build, optimize, and maintain CI/CD pipelines using GitLab CI/CD, Jenkins, and ArgoCD, supporting automated build, test, scan, and deployment workflows.

• Author, template, and manage Helm charts for application and infrastructure deployment across multiple environments.

• Build and maintain hardened Docker container images, including STIG-compliant base images, optimized Dockerfiles, and integration with Harbor and CI/CD pipelines.

• Manage and scale RKE2 Kubernetes clusters, including workload scheduling, networking, RBAC, secrets management, and cluster lifecycle operations.

• Administer Harbor (container registry) and Nexus (artifact repository), ensuring availability, security, and pipeline integration.

• Integrate Trivy and SonarQube into pipelines; remediate findings in coordination with security stakeholders.

• Enhance performance monitoring; identify bottlenecks and optimize cloud infrastructure and resource utilization.

• Author Python and Bash automation scripts to reduce toil and support infrastructure lifecycle management.

• Maintain technical documentation, runbooks, and architecture diagrams.

Qualifications:

Required: 

• Current TS/SCI clearance with Polygraph.

• Bachelor's degree in Computer Science or related field, or equivalent experience.

• 3+ years (mid-level) or 6+ years (senior-level) in DevOps, Infrastructure, or DevSecOps in a cloud environment.

• Advanced proficiency in Python and/or Bash scripting for automation and operational support.

• Strong Linux/Unix command line proficiency, preferably on RHEL-based systems.

• Experience building and maintaining CI/CD pipelines using GitLab CI/CD, Jenkins, ArgoCD, and Helm.

• Strong proficiency with Docker — writing Dockerfiles, building hardened images, and integrating builds into pipelines.

• Hands-on Kubernetes experience — cluster operations, workload management, RBAC, networking, and troubleshooting.

• Familiarity with agile methodologies and ability to operate effectively within a distributed team.

• Ability to travel up to 5% of the time.

Desired:

• Experience with AWS services and cloud-native infrastructure patterns.

• Hands-on experience with Terraform for cloud resource provisioning and IaC.

• Experience with RKE2 or other enterprise Kubernetes distributions in air-gapped or restricted environments.

• Familiarity with Harbor, Nexus, Trivy, and SonarQube in a pipeline context.

• Experience with Cilium for Kubernetes network policy and cluster networking.

• Experience with Packer or Ansible for image and configuration management.

• Relevant certifications: CKA/CKAD/CKS, AWS DevOps Professional, or CompTIA Security+

-

What You Can Expect:

 A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$113,200 - $237,800

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.