DevSecOps Engineer Principal

Type of Requisition:
Regular
Clearance Level Must Currently Possess:
None
Clearance Level Must Be Able to Obtain:
None Public Trust/Other Required:
BI Full 6C (T4)
Job Family:
Cyber and IT Risk Management Job Qualifications:
Skills:
Federal Risk and Authorization Management Program (FedRAMP), Infrastructure As Code (IaC), Security Compliance Certifications:
None Experience:
5 + years of related experience US Citizenship Required:
Yes
Job Description:
DEVSECOPS ENGINEER PRINCIPAL

(100% Remote)

Role Overview

We are seeking a security-focused Principal DevSecOps Engineer to design, automate, and secure cloud-native platforms supporting enterprise applications and AI workloads. This role emphasizes DevSecOps practices, compliance with FedRAMP and security audit requirements, and deep expertise across AWS, Amazon EKS, GitLab CI/CD, and MLOps/AIOps. The ideal candidate will be able to support all deployment workflows and data pipeline operations across the platform.

Key Responsibilities

- Design, implement, and maintain secure AWS cloud infrastructure using OpenTofu and GitLab CI/CD.
• Deploy, manage, and optimize Amazon EKS clusters supporting enterprise and Generative AI workloads.
• Integrate security controls into CI/CD pipelines using DevSecOps best practices, including automated vulnerability scans and compliance checks.
• Build and support MLOps/AIOps platforms for AI model deployment, monitoring, and lifecycle management.
• Ensure platform compliance with FedRAMP, NIST standards, internal security policies, vulnerability management processes, and audit-readiness requirements.
• Collaborate across engineering teams to support deployment operations, data pipelines, and platform automation.

Required Qualifications

- 5+ years of experience in Platform Engineering, DevOps, or Cloud Engineering.
• Hands-on experience with AWS, Amazon EKS, Linux, GitLab CI/CD.
• Demonstrated experience implementing DevSecOps practices, including container security, secrets management, and vulnerability remediation.
• Knowledge of FedRAMP, NIST 800-53, security compliance frameworks, and experience supporting internal/external audits.
• Experience working with Generative AI, MLOps/AIOps platforms, with strong scripting and automation skills.

Preferred Skills

- Experience with security platforms including Prisma Cloud, Wiz, Aqua, Trivy, or Snyk.
• Familiarity with observability and monitoring tools such as Prometheus, Grafana, CloudWatch, or Splunk.
• Experience with AI/ML technologies, including LLM deployment, vector databases, and AI security best practices.
• Knowledge of Zero Trust architectures, IAM, policy-as-code, and Infrastructure as Code governance.

Certifications
• Required: CompTIA Security+ or equivalent.
• Preferred: AWS certifications such as DevOps Engineer or Security Specialty, CISSP, or an equivalent security certification.

The likely salary range for this position is $144,500 - $195,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Scheduled Weekly Hours:
40 Travel Required:
Less than 10% Telecommuting Options:
Remote
Work Location:
Any Location / Remote
Additional Work Locations:
Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. GDIT typically provides new employees with 15 days of paid leave per calendar year to be used for vacatio