Senior DevSecOps / CI/CD Engineer

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

We are seeking a Senior DevSecOps / CI/CD Engineer to lead the architecture, development, and continuous improvement of secure software delivery pipelines for a mission-critical enterprise platform supporting an Intelligence Community customer. The platform provides a standardized environment for developers and mission teams across multiple classified enclaves, leveraging a zero trust, hub-and-spoke architecture.

 

In this role, you will establish pipeline architecture, automation standards, and secure software delivery practices across platform services, infrastructure, and tenant applications. You will lead the implementation of scalable CI/CD and GitOps workflows, integrate security controls throughout the software delivery lifecycle, and develop processes for securely promoting software artifacts across environments.

 

You will collaborate with platform architects, cybersecurity leaders, integration and test teams, and operations personnel to ensure software delivery processes meet mission, security, reliability, and compliance requirements. Your technical leadership will help improve delivery performance, strengthen continuous authorization practices, and enable consistent, secure delivery of new capabilities to mission users.

• Lead the design and implementation of CI/CD pipeline architectures supporting platform services, infrastructure, and tenant applications across multiple environments.

• Establish pipeline engineering standards, reusable templates, GitOps practices, source control strategies, release versioning, and deployment automation.

• Design scalable automation using tools such as GitLab CI, Jenkins, GitHub Actions, Argo CD, or similar technologies.

• Lead the automation of software builds, testing, packaging, artifact management, and deployments to containerized environments using Kubernetes, EKS, OpenShift, or similar platforms.

• Architect reusable pipeline components and self-service tooling that improve consistency, reduce onboarding time, and enable development teams to deliver software independently.

• Establish standards for infrastructure as code and deployment automation using Terraform, Ansible, Helm, or similar technologies.

• Evaluate pipeline architecture, identify technical risks and bottlenecks, and lead improvements to delivery performance, reliability, and maintainability.

• Lead the integration of automated security controls into CI/CD pipelines, including SAST, DAST, software composition analysis, container image scanning, secrets detection, and code quality validation.

• Establish and maintain standards for hardened container base images, trusted software dependencies, approved artifact repositories, and secure artifact management.

• Define processes for generating, validating, and maintaining SBOMs, security scan results, and other technical evidence supporting RMF authorization, auditability, and continuous ATO.

• Lead the design and implementation of secure artifact promotion workflows across development, test, and production environments, including coordination with cross-domain engineering teams for approved transfers between classification levels.

• Partner with cybersecurity and compliance teams to ensure pipeline controls support applicable security requirements and authorization objectives.

• Incorporate policy-as-code, automated compliance checks, and other security enforcement mechanisms into delivery workflows where appropriate.

• Identify and mitigate risks associated with software supply chain security, pipeline configuration, artifact integrity, and deployment processes.

• Establish metrics and operational practices for evaluating pipeline health, performance, and reliability.

• Analyze delivery metrics, including deployment frequency, lead time for changes, change failure rate, and recovery time, and lead initiatives to improve software delivery outcomes.

• Lead the investigation and resolution of complex pipeline, integration, and deployment issues across development and operational environments.

• Coordinate release strategies and deployment activities with platform engineering, cybersecurity, integration and test, and operations teams.

• Develop and maintain pipeline architecture documentation, engineering standards, operational procedures, and technical guidance.

• Mentor junior and mid-level engineers, conduct technical reviews, and promote consistent engineering practices across the team.

• Advise technical stakeholders on pipeline architecture, automation strategy, secure delivery practices, and opportunities to improve platform capabilities.

Location: This position is fully onsite in Chantilly, VA.

• Active TS/SCI clearance with Polygraph.

• Bachelor's degree in Computer Science, Software Engineering, Information Systems, or a related technical field, plus 8 or more years of relevant experience; additional 4 years of relevant experience may substitute for a degree.

• Extensive hands-on experience architecting, designing, and maintaining production CI/CD pipelines for software, infrastructure, or platform services.

• Experience establishing pipeline engineering standards, reusable automation, and GitOps-based software delivery practices.

• Experience deploying and managing containerized workloads using Docker, Kubernetes, or similar technologies.

• Experience integrating and operationalizing automated security controls within CI/CD pipelines, including application security testing, software dependency analysis, container image scanning, or secrets detection.

• Proficiency with Git and scripting languages such as Bash or Python.

• Experience with infrastructure as code and deployment automation using Terraform, Ansible, Helm, or similar technologies.

• DoD 8140 / 8570 IAT Level II certification, such as Security+ CE, or the ability to obtain the required certification within the applicable timeframe.

• Experience architecting secure software delivery across multiple classified enclaves or disconnected environments.

• Experience leading DevSecOps efforts for DoD or Intelligence Community software factories, hardened container image programs, or continuous ATO initiatives.

• Experience implementing zero trust architecture principles and policy-as-code tools, such as OPA/Gatekeeper or Kyverno.

• Experience establishing artifact management and software supply chain security practices using platforms such as Artifactory, Nexus, or Harbor.

• Experience with code quality platforms, such as SonarQube, and observability tooling for pipeline and application monitoring.

• Kubernetes certification, such as CKA, CKAD, or CKS, and/or a cloud professional certification.

• Prior experience supporting Intelligence Community or DoD mission programs.

• Experience providing technical leadership, mentoring engineering teams, and coordinating secure software delivery across multiple engineering disciplines.

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.