Senior Pipeline Engineer

Looking for an opportunity to make an impact?

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. The Leidos National Security Sector (NSS) combines technology-enabled services and mission software capabilities in the areas of cyber, logistics, security operations, and decision analytics to support our defense and intel customers’ mission to defend against evolving threats around the world.

Your greatest work is ahead!

The Multi-domain Solutions Division (MDS) within the Leidos National Security Sector is seeking a skilled Senior Pipeline Engineer to join a new cyber security program and play a key role in supporting government-critical systems. You will be part of a program that oversees development, integration, delivery, and operations and maintenance of IT managed security services, which encompasses support to monitor the cybersecurity threat and security posture situational awareness for the enterprise. This opportunity is in anticipation of a future contract award!

What you’ll be doing:

• Lead the design, implementation, and management of secure CI/CD pipelines that protect mission-critical applications and infrastructure. 
• Responsible for embedding security into every phase of the software development lifecycle (SDLC), leveraging cutting-edge DevSecOps practices to ensure that security controls are automated, scalable, and resilient.
• Play a pivotal role in guiding cross-functional teams, enforcing security standards, and driving continuous improvement of the organization’s security posture. 
• Demonstrate deep expertise in cloud security, secure infrastructure as code (IaC), and the integration of security tools into CI/CD workflows, ensuring that security remains a top priority without compromising agility.
• Responsible for writing and maintaining source code, creating and maintaining software applications and applying frameworks involved in a software release. 
• Duties include computer programming, documenting, managing configuration, testing, and bug fixing involved in creating and maintaining applications and frameworks involved in a software release life cycle and resulting in a software product. 
• Provide technical advice/input that impact strategic client outputs and Leidos business results. 
• Impact functional strategy by developing new solutions, processes, standards or operational plans that position Leidos competitively in the marketplace. 
• Serve as a technical lead on large, complex projects. Mentors and coaches other technical staff.
• Define and lead the security strategy for CI/CD pipelines, ensuring alignment with business goals, compliance standards, and industry best practices.
• Mentor and provide technical guidance to junior engineers, promoting a security-first mindset across development and operations teams.
• Act as a subject matter expert (SME) in DevSecOps, advising leadership on emerging threats, vulnerabilities, and mitigation strategies.
• Secure CI/CD Pipeline Development:
• Architect, develop, and optimize CI/CD pipelines with built-in security controls, ensuring seamless integration of automated security tests.
• Implement security gates, vulnerability scanning, and compliance checks within CI/CD workflows to detect and prevent potential threats early.
• Maintain and improve security tooling in the CI/CD environment, ensuring high performance and minimal false positives.
• Champion DevSecOps principles by automating security testing (SAST, DAST, IAST) and compliance checks across the SDLC.
• Develop and maintain custom security scripts and automation tools to monitor, analyze, and respond to security events in real time.
• Integrate secret management solutions, certificate handling, and secure credential management into CI/CD pipelines.
• Lead vulnerability management efforts by proactively identifying, analyzing, and remediating security gaps in application code, containers, and cloud infrastructure.
• Enforce compliance with industry regulations and security frameworks such as NIST, ISO 27001, CIS, PCI-DSS, and SOC 2.
• Collaborate with GRC (Governance, Risk, and Compliance) teams to establish and maintain security policies and audit processes.
• Design and secure cloud-native environments (AWS, Azure, GCP), ensuring best practices in infrastructure as code (IaC) and cloud architecture.
• Automate security configurations and enforce cloud security posture management (CSPM) policies to protect sensitive data.
• Implement container security sol