DevSecOps Architect

Leidos Security Enterprise Solutions (SES) is seeking a highly skilled DevSecOps Architect to own and drive the architecture, tooling strategy, and automation roadmap used across all engineering teams. This is a senior individual contributor role — no people management, just pure technical influence.
We’re looking for someone with broad technical reach and deep DevSecOps knowledge who can create and evolve our enterprise-wide toolchain. This includes evaluating and deploying commercial tools, integrating open-source capabilities, and building in-house solutions where gaps exist. You'll work closely with engineering teams, software architects, cyber, and IT to create an efficient, scalable, and secure development ecosystem.

- Define and enforce secure-by-default software engineering practices.

- Implement and integrate static and dynamic code analysis tools.

- Collaborate with cyber and product architects to harden platforms and toolchains.

- Create and maintain a DevSecOps roadmap, from code to deployment.

- Identify, evaluate, and deploy COTS, open source, and custom tools.

- Design scalable CI/CD pipelines using tools like Jenkins, GitLab CI, Azure DevOps, etc.

- Drive container and orchestration adoption (Docker, Kubernetes, OpenShift).

- Create and maintain secure and reproducible development environments.

- Develop custom scripts/utilities (Python, Bash, PowerShell, etc.) to automate manual processes.

- Ensure pipelines support automated build, test, scan, and deploy.

- Integrate security scanning, test frameworks, and compliance gates into DevSecOps flows.

- Enable and document test environments that reflect real-world deployment targets.

- Bachelor's degree in Computer Science, Engineering, or a related field.

- 10+ years of relevant software/devops/security engineering experience.

- Strong hands-on skills with:

  • Cloud Platforms: Azure (including Azure DevOps), AWS

  • CI/CD: Jenkins, GitLab, Azure DevOps

  • Build Tools: CMake

  • Version Control: Git, GitLab

  • Atlassian Stack: Jira, Jira Service Management (JSM), Confluence

  • Operating Systems: Red Hat Enterprise Linux (RHEL), Windows 10/11/Server 2019 & 2022

  • Containers & Orchestration: Docker or Podman, Kubernetes or OpenShift

  • Virtualization: VirtualBox, KVM/libvirt

  • Networking: Strong understanding of network architecture

  • Identity & Access Management: SSSD, LDAP, Entra ID, IAM, GPO

  • Requirements Engineering: Strong understanding of requirements management

  • Programming/Scripting: Python, Bash, PowerShell, C++, C#, Java (minimum)

Experience with any of the following is a strong plus:

  • Artifact Repositories: Nexus

  • AI & Dev Intelligence Tools: SourceGraph, HuggingFace, Ollama

  • Collaboration & Reporting: Discourse, Planview

  • Requirements Management: Jama or similar

  • Code Quality & Security: SonarQube, Dependency-Track

  • Monitoring & Observability: Prometheus, Cockpit, Portainer, Splunk

  • Vulnerability Management: Tenable.SC

- Acts like a CTO for toolchains and DevSecOps infrastructure.

- Can navigate enterprise complexity without sacrificing agility.

- Doesn’t wait for permission — prototypes, tests, and builds.

- Knows when to build vs buy, and documents everything like their life depends on it.

- Doesn’t just automate processes — automates thinking.

- Is a strong communicator and a passionate evangelist for change, able to influence adoption of new tools and practices across engineering.

Come break things (in a good way). Then build them smarter.

We're the tech company everyone calls when things get weird. We don’t wear capes (they’re a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for “how it’s always been done.”

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.