Software Engineer - Kubernetes / DevSecOps

About the role

CACI is the Prime Contractor on MWIII Bridge, which develops and supports Identity, Credential and Access Management (ICAM) capabilities for the Intelligence Community. This Software Engineer Level 3 position supports the ZT ICAM team, DISA and other Department of Defense customers, working locally in the Hanover, MD area. The role requires a TS/SCI clearance with polygraph.

Key responsibilities

• Serve as a Software Engineer Level 3, providing Kubernetes, DevSecOps and software supply chain security support.
• Develop and sustain the integrated Kubernetes deployment package, including single- and multi-namespace operations.
• Automate secure build, test, scanning, signing, packaging and release processes.
• Deploy and integrate policy administration, decision, attribute and enforcement components with secure service communication, workload identity, synchronization, observability and resilient operation across enterprise, multi-site, tactical and disconnected environments.
• Work with customer teams to assess environments, tailor configurations, troubleshoot deployments and produce deployment and support documentation.

Required profile

• TS/SCI clearance with polygraph.
• Bachelor's degree in Computer Science, Computer Engineering, Software Engineering or a related discipline; four additional years of experience may substitute for the degree.
• Eight or more years of software engineering experience, including three years in SIGINT, Information Assurance or Information Technology.
• Experience engineering, securing, upgrading and troubleshooting production Kubernetes or RKE2 environments.
• Experience leading technical reviews, supporting customer deployment and troubleshooting, writing technical documentation and mentoring engineers in an Agile environment.

Required skills

• Kubernetes, RKE2, namespaces, workloads, services, ingress, ConfigMaps, Secrets, RBAC, network policies, persistent storage, DNS and service discovery.
• Helm, Kustomize, values files, Docker or OCI image packaging.
• Linux, scripting, Git, CI/CD, automated testing, security scanning, artifact publication and release delivery.
• Software supply chain controls: SBOMs, vulnerability management, artifact signing, provenance and remediation tracking.
• Desired: Rancher, Kubernetes operators, Harbor, image promotion, container hardening, and knowledge of Zero Trust, ICAM, ABAC, OAuth 2.0, OpenID Connect, SAML, LDAP, PKI and service-to-service authorization.

What we offer

• Proposed pay range of $113,200 - $237,800, depending on location, contract wage rates, experience, skills and education.
• Healthcare, wellness, financial, retirement, family support, continuing education and time off benefits.
• A culture of integrity, a flexible time off benefit and learning resources.