Senior DevSecOps Engineer

Job Description
See what you are missing. Our employees work on the world's most advanced software and electronics - from developing world-class autonomous mission management capabilities to advanced data analytics to support the warfighters and the intelligence community. Spanning air, land, sea, and space, we are developing the technology of tomorrow, delivered today. Drawing strength from our differences, we are innovating for the future. And you can, too. Our flexible work environment provides you a chance to change the world without giving up your personal life. We put our customers first - exemplified by our mission: "We Protect Those Who Protect Us(R)." Sound like a team you want to be a part of? Come build your career with BAE Systems.
Our engineers are the lifeblood of our company and we are more than 5,000 strong. With our robust offering of educational and career development opportunities, your chances to grow are limitless. BAE Systems' Digital Architecture Team (DAT) is looking to hire a Senior DevOps / DevSecOps Engineer to join our team. We are responsible for transitioning Engineering and Operations from legacy software and infrastructure to modern digital practices.
Our team develops and operates mission-focused software in secure, self-hosted environments where reliability, portability, and operational control are critical. Our platform includes Nomad, Vault, MinIO, PostgreSQL, Dagster, and containerized gRPC microservices and web applications.
As a Senior DevOps / DevSecOps Engineer, you will help mature our CI/CD capabilities so complete variants of our microservices and front-end applications can be built, validated, and deployed consistently through the testing environment. This will create a faster feedback loop for engineers and stakeholders, allowing changes to move efficiently from development into the environments where the software is evaluated and used. You will also help automate infrastructure and delivery processes, strengthen observability and security controls, and ensure our services are reliable and supportable in production. The ideal candidate brings strong experience with self-hosted platforms, sound software engineering judgment, and a DevSecOps mindset.
Responsibilities:

• Lead the design, deployment, and ongoing administration of secure, self-hosted application platforms using tools such as Nomad and Vault.

• Develop and maintain reusable deployment specifications, configuration, and automation for microservices and front-end applications.

• Drive infrastructure as code, configuration management, and automated environment provisioning across development, integration, and testing environments.

• Partner with engineering teams to improve application reliability, release readiness, operational support, and the speed of the development feedback loop.

Application Integration:

• Collaborate with development teams to containerize and deploy Python, gRPC microservices, and front-end applications.

• Define platform standards for service configuration, networking, secrets management, health checks, and graceful failure handling.

Monitoring and Observability:

• Design and operate monitoring, metrics, dashboards, alerting, and logging solutions using Grafana, Prometheus, and related tools.

• Improve system observability so teams can detect, diagnose, and resolve production issues quickly.

• Use service-level indicators, incident data, and operational trends to drive measurable reliability improvements.

Infrastructure Automation and CI/CD:

• Build and mature GitLab CI/CD pipelines that build, test, package, security-scan, and deploy complete application variants through the testing environment.

• Create scripts and automation that improve deployment repeatability, operational efficiency, feedback speed, and recovery time.

• Promote versioned, auditable, and repeatable delivery processes across development, integration, testing, and production environments.

DevSecOps, Reliability, and Performance:

• Embed security controls into the software delivery lifecycle, including code scanning, dependency analysis, container scanning, and image signing where appropriate.

• Implement platform security practices such as least-privilege access, network controls, secrets protection, secure workload configuration, and resilience testing.

• Participate in incident response, root-cause analysis, performance tuning, disaster recovery planning, and corrective action tracking.

Documentation and Collaboration:

• Document platform architecture, infrastructure configurations, deployment procedures, security controls, and operational runbooks.

• Work closely with software, systems, hardware, security, and operations teams to align platform capabilities with application needs.

• Mentor engineers and promote DevOps, DevSecOps, automation, and operational excellence practices across the organization.

Required Education, Experience, & Skills

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.

• Active Secret clearance required.
• 3+ years of experience in DevOps, platform engineering, site reliability engineering, software infrastructure, software engineering, or a related field.
• Experience designing and maintaining secure, highly available platforms for containerized applications.

• Experience building and maturing CI/CD pipelines that deploy complete application variants through integration or testing environments and provide actionable feedback to development teams.

• Experience with infrastructure as code, configuration management, observability, incident response, and production operations.

• Experience mentoring engineers and leading technical initiatives across multiple teams.
• Proficiency with containerized application platforms, Docker, Nomad or comparable schedulers, Vault or comparable secrets-management tools, Linux, Bash, and Python or another scripting language.
• Strong understanding of GitLab CI/CD, container registries, deployment automation, automated testing, security scanning, and infrastructure as code practices.

• Knowledge of networking, service discovery, storage, identity and access management, secrets, and policy enforcement in self-hosted environments.

• Understanding of gRPC microservices, PostgreSQL, service reliability patterns, and distributed systems.
• Excellent problem-solving, analytical, and incident-response skills.
• Strong communication and collaboration skills with technical and nontechnical stakeholders.

• Ability to lead through influence, make sound operational decisions, and communicate risks clearly.

• Detail-oriented approach with a focus on security, reliability, quality, and continuous improvement.

Preferred Education, Experience, & Skills

• Experience with Ansible or a comparable configuration-management and automation platform; ability to develop maintainable, idempotent automation for self-hosted environments.

• 2+ years of hands-on experience operating Nomad, Kubernetes, or comparable container orchestration and scheduling platforms in production environments.

• Experience with self-hosted platform security, policy enforcement, software supply-chain security, vulnerability management, or compliance automation.

• Experience with Grafana, Prometheus, centralized logging, OpenTelemetry, or similar observability platforms.

• Certifications such as Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS), or a comparable cloud or security certification.

Pay Information
Full-Time Salary Range: $97008 - $164914
Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.
Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.
About BAE Systems, Inc.
BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support.
Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters.
This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.