Principal DevSecOps / Platform Engineer

Type of Requisition: Regular Clearance Level Must Currently Possess: Secret Clearance Level Must Be Able to Obtain: Secret Public Trust/Other Required: None Job Family: Software Engineering Job Qualifications: Skills: Containerization Software, GitLab CI/CD, Kubernetes Orchestration, Software Delivery Certifications: None Experience: 8 + years of related experience US Citizenship Required: Yes Job Description: Principal DevSecOps / Platform Engineer We are seeking a developer-focused DevSecOps engineer to join a high-performing team building and operating software factories, security automation platforms, and AI-enabled development environments for Department of War and Federal customers. This role emphasizes hands-on software development within a DevSecOps context - you will write production code, build tooling, and develop applications, not just configure pipelines. The team supports multiple concurrent internal R&D efforts and customer delivery engagements across defense and federal programs. You will contribute to a range of workstreams including agentic AI application development, software factory platform enhancements, security and compliance automation, and secure software delivery for classified environments. MEANINGFUL WORK AND PERSONAL IMPACT Work across a broad portfolio rather than a single narrow program - variety and exposure to cutting-edge problems in government software delivery Significant investment in AI, automation, and modern platform engineering - not legacy maintenance Small, senior team where individual contributions have outsized impact Opportunity to shape how the our customers' missions are built and delivered using secure software at scale Exposure to Growth activities (proposals, customer engagements) for engineers who want to develop business acumen alongside technical depth KEY RESPONSIBILITIES DevSecOps Engineering - Primary Focus Utilize AI-assisted Development tools and frameworks to: Design, develop, and maintain CI/CD pipelines for build, test, security scanning, and release across unclassified and classified environments Integrate and operate security scanning toolchains (SAST, SCA, container scanning, SBOM generation) as automated pipeline stages Use AI-assisted development workflows daily — code generation, automated testing, intelligent code review, and documentation — and champion their adoption across teams Contribute to the development of agentic AI capabilities including tool orchestration, prompt engineering, and workflow automation Build tooling and automation to support continuous Authority to Operate (cATO) processes, including automated evidence collection, compliance reporting, and policy enforcement Develop and maintain hardening pipeline templates that product teams consume for secure-by-default software delivery Support platform's security pipeline layer — build, test, and release process for software packages that include both application code and runtime platform components Implement and enforce software supply chain security controls (signing, provenance, artifact integrity) Troubleshoot build and deployment failures, support development teams consuming shared pipeline services Platform Engineering Deploy and operate Kubernetes clusters (Big Bang / Iron Bank baseline) in classified (CUI/IL5) environments Deploy, configure, and support AI-powered development tools (GitLab Duo, LLM-based code assistants, agentic AI frameworks) for platform consumers and internal team use Support AI/ML platform infrastructure (model serving, GPU workloads, data pipelines) as part of the broader platform offering Stand up and maintain shared platform services: Harbor (container registry), Nexus (artifact repository), Vault (secrets management), ArgoCD (GitOps deployment) Implement Infrastructure-as-Code for environment provisioning, cluster lifecycle, and configuration management (Terraform, Ansible) Support multi-cluster management and hub/spoke deployment models — build in shared services, deploy into downstream accounts Configure and troubleshoot network connectivity, Zscaler integration, and Okta/SAML identity federation for platform consumers Contribute to platform evolution including self-service namespaces, developer onboarding, and golden-path templates Maintain and improve multiple production software factory environments serving diverse federal customers Contribute to runbooks, operational documentation, and incident response procedures WHAT YOU’LL NEED TO SUCCEED - REQUIRED SKILLS Bring your engineering expertise along with a drive for innovation to GDIT. The DevOps Engineer Principal must have: ● Education: Bachelor's degree and 8+ years experience. In lieu of degree 12+ years of hands-on experience ● Experience: 5+ years of related experience in Software Engineering, DevOps / DevSecOps technologies; 3+ years of hands on experience with Kubernetes Experience using AI-powered development tools (code assistants, LLM-based tooling, AI-augmented workflows) in daily engineering work — and enthusiasm for pushing their adoption forward Hands-on experience with CI/CD pipeline development — GitLab CI strongly preferred; Jenkins, GitHub Actions, or similar accepted Experience integrating security scanning tools into automated pipelines (SAST, DAST, SCA, container image scanning) Proficiency with Infrastructure as Code (Terraform and/or Ansible) Experience with containerization (Docker, Helm, OCI artifacts) and container registry management Strong Linux systems skills — administration, shell scripting, troubleshooting Solid understanding of Git-based workflows, branching strategies, and GitOps deployment patterns Experience working in or deploying to classified or air-gapped environments Ability to work across multiple concurrent projects with shifting priorities Strong written and verbal communication skills Security clearance level :