Senior DevSecOps Engineer (Remote)

About the role

CACI is hiring a Senior DevSecOps Engineer to join a high-performing DevSecOps team supporting its DoD/AF customer. The role covers cloud-native enterprise platforms, with a focus on Kubernetes platform engineering, Big Bang deployment and sustainment, Terraform-based Infrastructure as Code, GitOps and secure CI/CD automation. It is a full-time, regular position with up to 10% local travel, requiring a Secret clearance.

Key responsibilities

• Deploy, configure and sustain Kubernetes-based platforms and mission applications using Big Bang, Helm and GitOps.
• Build and maintain Terraform-based IaC for cloud infrastructure, Kubernetes, networking, IAM and platform services.
• Build, secure and optimize CI/CD pipelines, including reusable templates, automated testing and controlled releases.
• Triage and remediate security findings against vulnerability-management SLAs.
• Maintain hardened Kubernetes and cloud baselines aligned with DISA STIGs, NIST 800-53, RMF and organizational requirements.
• Manage Kubernetes security controls: RBAC, network policies, pod security, admission controls, secrets and ingress/egress.
• Keep GitOps workflows in sync with approved code and monitor CI/CD, runners, deployments and workloads.
• Automate patching, configuration management and compliance validation, and produce security and operational documentation.
• Support RMF and ATO lifecycle activities by collecting control evidence and addressing assessment findings.

Required profile

• Active Secret clearance.
• At least 7 years of relevant experience with a related degree.
• 3-5 years designing and deploying Kubernetes solutions; Big Bang is a plus.
• Strong experience with Terraform modules and reusable IaC patterns.
• Experience with CI/CD pipelines, containerization and secure DevSecOps practices.
• Experience with AWS services (EKS, IAM, VPC, EC2, S3, Route 53, CloudWatch, load balancers, security services).
• Familiarity with DISA STIGs, RMF, NIST SP 800-53, ATO processes, POA&M management and continuous monitoring.

Required skills

• GitOps with Argo CD, Flux, GitLab, GitHub or similar.
• CI/CD pipelines, containerization, Terraform.
• Desired: 5-10 years in DevSecOps, platform engineering, cloud engineering, SRE or software delivery.
• Desired: CAC authentication, PIV tokens, client-side PKI, scripting in Python, Bash, PowerShell or Go, and certifications such as CKA, CKAD, CKS, AWS, Security+, CISSP or CCSP.

What we offer

• Proposed pay range of $98,500-$206,800, depending on location, experience and skills.
• Healthcare, wellness, financial, retirement, family support, continuing education and time-off benefits.
• Flexible time off and learning resources.