The Role
Designs, deploys, operates, and maintains secure, scalable cloud products and services. Builds Kubernetes and AWS GovCloud environments, Terraform infrastructure, and CI/CD pipelines with integrated security testing. Implements FedRAMP, FISMA, and NIST security controls; supports authorization, continuous monitoring, and compliance documentation. Manages vulnerability scanning, SIEM, secrets, observability, container security, and zero-trust technologies while automating tooling with Python.
Summary Generated by Built In
SAIC is seeking an experienced and dedicated DevSecOps Engineer Principal to support the design, deployment, operation, and maintenance of secure, scalable Cloud products and services within our Cloud-based environment. As a key member of our team, you will play a critical role in ensuring the efficiency, security, and automation of our development and operational processes. The ideal candidate will possess deep expertise in Kubernetes, Infrastructure as Code, AWS GovCloud, FedRAMP/FISMA security control implementation, and CI/CD pipeline engineering, with an unwavering commitment to a security-first mindset. This role can be worked 100% remotely within the united states. Candidates must have the ability to get a secret clearance.
Qualifications- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field with 9+ years of experience in DevOps/DevSecOps engineering roles. Masters and 7 years of experience.
- Candidates must be U.S. Citizens.
- Candidates must be able to get a secret clearance.
- Expert-level proficiency in Kubernetes including cluster administration, workload deployment, and security hardening, with experience in EKS and Helm.
- Extensive hands-on experience with AWS services including EKS, ECS, EC2, Lambda, VPC, IAM, KMS, Secrets Manager, S3, RDS, CloudWatch, CloudTrail, and AWS Config, with specific experience in AWS GovCloud environments.
- Strong proficiency in Infrastructure as Code using Terraform for infrastructure provisioning, management, and security scanning.
- Demonstrated experience implementing and managing CI/CD pipelines using GitLab CI/CD or GitHub Actions with strong Git workflow and GitOps experience.
- Deep understanding of FedRAMP and FISMA compliance requirements with hands-on experience implementing NIST 800-171 and 800-53 security controls, supporting authorization processes, and maintaining continuous monitoring programs.
- Experience developing and maintaining security compliance documentation including System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and security assessment artifacts.
- Proficiency with security tooling including SIEM platforms (Splunk, AWS Security Hub), vulnerability scanning (Nessus, Tenable.io), SAST/DAST tools (SonarQube, OWASP ZAP), secrets management (HashiCorp Vault, AWS Secrets Manager), and cloud security posture management using Orca Security.
- Experience integrating security controls directly into CI/CD pipelines including SAST/DAST, software composition analysis (SCA), container image scanning, and secrets detection.
- Proficiency in scripting languages such as Python for automation and tooling development.
- Experience with observability and monitoring platforms such as Prometheus, Grafana, or the ELK Stack.
- Familiarity with zero-trust architecture principles and service mesh technologies such as Istio or Linkerd.
- Relevant certifications such as CKA, CKS, AWS Certified Solutions Architect, AWS Certified Security Specialty, CISSP, or CompTIA Security+ are strongly preferred.
We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.
Skills Required
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field and 9+ years of DevOps/DevSecOps engineering experience; alternatively, a master’s degree and 7 years of experience
- U.S. citizenship
- Ability to obtain a Secret security clearance
- Expert-level Kubernetes proficiency, including cluster administration, workload deployment, security hardening, EKS, and Helm
- Extensive AWS experience, including AWS GovCloud and EKS, ECS, EC2, Lambda, VPC, IAM, KMS, Secrets Manager, S3, RDS, CloudWatch, CloudTrail, and AWS Config
- Strong Terraform Infrastructure as Code experience, including infrastructure provisioning, management, and security scanning
- Experience with GitLab CI/CD or GitHub Actions, Git workflows, and GitOps
- Experience implementing FedRAMP and FISMA requirements, NIST 800-171 and 800-53 controls, authorization processes, and continuous monitoring
- Experience creating and maintaining SSPs, POA&Ms, and security assessment artifacts
- Experience with Splunk, AWS Security Hub, Nessus, Tenable.io, SonarQube, OWASP ZAP, HashiCorp Vault, AWS Secrets Manager, and Orca Security
- Experience integrating SAST, DAST, SCA, container image scanning, and secrets detection into CI/CD pipelines
- Proficiency in Python scripting for automation and tooling development
- Experience with Prometheus, Grafana, or the ELK Stack
- Familiarity with zero-trust architecture and Istio or Linkerd service mesh technologies
- CKA, CKS, AWS Certified Solutions Architect, AWS Certified Security Specialty, CISSP, or CompTIA Security+ certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Spectrum San Diego is a high tech security innovator, specializing in ultra-low-dose X-ray screening systems.
