DevSecOps Architect

$122,200 - $220,900/Yr

Leidos - Norfolk, VA

Full-time

Norfolk, VA

Professional, Scientific, and Technical Services

About the position

Leidos currently has an opening on the Service Management Integration and Transport (SMIT) Contract for a DevSecOps Architect. This is an exciting opportunity to use your experience and leadership skills to successfully execute the mission of the Navy's largest IT services program. Under the SMIT Contract, the Leidos team is responsible for the core backbone for the Navy-Marine Corps Intranet, including cybersecurity services, network operations, network engineering, service desk, seat support services, and data transport. This role collaborates with the Director of DevSecOps and is responsible for supporting, migrating, automation and optimization of software development and deployment process, and maturing the DevSecOps program. In this role, you will create, lead, and implement the processes and tools to deliver an automated, CI/CD pipeline-based DevSecOps system. You will work across the development, security, operations, and Infrastructure teams to ensure that the DevSecOps tools and processes are supporting the holistic system development, integration, and fielding effort. Additionally, you will help build a DevSecOps organization to support complex software and hardware systems' rapid development, security, testing, validation, and fielding. You will collaborate with other Developers, Security, and Operations to continuously deliver products and increase the value stream for the organization and customers. As a DevSecOps Architect, you will coach and review the work of lower-level technical staff, embrace and champion Agile development processes, and provide technical guidance to team members on best practices. You will conduct comprehensive technology research to evaluate potential technical and procedural best practices in support of DevSecOps and Infrastructure as Code (IaC). Furthermore, you will create and publish strategies, implementation, maintenance, and administration guides for DevSecOps platforms, and develop and publish engineering architectural artifacts for reuse across the organization. Your role will also involve researching, analyzing, designing, developing, and supporting high-quality pipeline automation workflows inside and outside the cloud platform that align with business and technology strategies.

Responsibilities

• Create, lead, and implement the processes and tools to deliver an automated, CI/CD pipeline-based DevSecOps system.
• Work across the development, security, operations, and Infrastructure teams to ensure that the DevSecOps tools and processes are supporting the holistic system development, integration, and fielding effort.
• Help build a DevSecOps organization to support complex software and hardware systems' rapid development, security, testing, validation, and fielding.
• Collaborate with other Developers, Security, and Operations to continuously deliver products and increase the value stream for the organization and customers.
• Coach and review the work of lower-level technical staff.
• Embrace and champion Agile development processes and adoption to modern DevSecOps workflows and practices while providing technical guidance to team members and coworkers on best practices.
• Create building blocks of reusable capabilities that can adapt to different customer environments.
• Conduct comprehensive technology research to evaluate potential technical and procedural best practices in support of DevSecOps and IaC.
• Create and publish strategies, implementation, maintenance, and administration guides for DevSecOps platforms.
• Develop and publish engineering architectural artifacts for reuse across the organization.
• Function as a solutions architect, lead or contributing, within a Business and Proposal Development Process.
• Research, analyze, design, develop and support high-quality pipeline automation workflows inside and outside the cloud platform that are appropriate for business and technology strategies.
• Automate the software development and deployment process.
• Work with software developers and operations engineers to improve the software delivery process.
• Stay up to date on the latest DevSecOps practices and technologies.
• Drive proof of concepts and conduct technical feasibility studies for business requirements.
• Provide internal and external customers with excellent customer service and world-class service.
• Communicate project health, risks, and issues to the program partners, sponsors, and management teams.
• Resolve most conflicts between timeline, budget, and scope independently but intuitively raise sophisticated or consequential issues to senior management.

Requirements

• Requires B.D Degree and 12-15 years of prior relevant experience or Master's with 10-13 years of prior relevant experience.
• Currently possess and ability to maintain an active DoD Secret security clearance.
• Minimum of DoD 8570.01 IAT Level II Certification required prior to onboarding and must maintain certification while supporting the SMIT Contract.
• Exceptional written and oral communication skills, presentation/briefing skills; ability to interact with internal Senior-level Managers and Senior Navy Customers.
• Ability to review requirements, comprehend, and solution capabilities that satisfy customer requirements.
• Ability to work in a highly collaborative, forward thinking, and innovation-driven environment.
• Experience with Agile and DevSecOps concepts and best practices.
• Ability to support program execution in classified environments.
• Experience with Atlassian products (Jira, Confluence, Bitbucket, etc.).
• Experience with CI/CD pipeline tools like Jenkins, and GitLab.
• Experience with container technologies such as Docker and container orchestration tools like Kubernetes.
• Experience with commercial cloud infrastructure deployment environments such as AWS and Azure.
• Experience with automated provisioning and configuration tools like Terraform, Cloud Formation, Chef, Puppet, Ansible, or similar technologies.
• Working knowledge of the Risk Management Framework (RMF), DISA STIGs.
• Experienced and adept at developing and maintaining technical documents, analyses, and reports.
• Experience presenting to client stakeholders and company management.
• Must be able to access SIPRNet from an NMCI location on short notice (local travel).
• Ability to travel up to 10% including the potential for OCONUS travel.

Nice-to-haves

• Previous work experience providing support to the NGEN-NMCI program is highly desired.
• Advanced/Professional level vendor certifications (Azure).
• ITILv4 and Agile SAFe certifications or applicable experience.