DevSecOps Engineer Chief

SAIC; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

SAIC is seeking an experienced DevSecOps Engineer Chief to secure, deploy, and manage cloud-based products and services. The role emphasizes Kubernetes, IaC, and FedRAMP/FISMA security control implementation with strong CI/CD engineering and security-first mindset.

Remote work is available within the United States, with a secret clearance required. Ideal candidates have extensive GovCloud experience, Terraform and IaC skills, and a proven track record in securing cloud environments.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity with substantial DevOps/DevSecOps experience.
• U.S. Citizens with ability to obtain secret clearance.
• Expert Kubernetes with EKS and Helm experience.
• Hands-on AWS GovCloud experience and related services.
• CI/CD pipelines using GitLab CI/CD or GitHub Actions; GitOps experience.

Responsibilities

• Design, deploy, operate, and maintain secure, scalable cloud products and services.
• Automate development and operations to improve efficiency and security.
• Lead FedRAMP/FISMA compliance efforts and NIST 800-171/800-53 controls.
• Develop and maintain SSPs, POA&Ms, and security artifacts.
• Integrate security controls into CI/CD pipelines and perform SCA/SAST/DAST scanning.

Skills

Kubernetes

Terraform

CI/CD

GitLab CI/CD

GitHub Actions

FedRAMP

NIST 800-171

SAST/DAST

Python

Istio

Linkerd

AWS GovCloud

AWS Services

Security Tooling

SRE/Observability

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Master's degree preferred

Tools

Helm

GitLab CI/CD

GitHub Actions

Splunk

AWS Secrets Manager

Nessus

Tenable.io

OWASP ZAP

HashiCorp Vault

Orca Security

Prometheus

Grafana

Istio

Linkerd

Job description

SAIC is seeking an experienced and dedicated DevSecOps Engineer Chief to support the design, deployment, operation, and maintenance of secure, scalable Cloud products and services within our Cloud-based environment. As a key member of our team, you will play a critical role in ensuring the efficiency, security, and automation of our development and operational processes. The ideal candidate will possess deep expertise in Kubernetes, Infrastructure as Code, AWS GovCloud, FedRAMP/FISMA security control implementation, and CI/CD pipeline engineering, with an unwavering commitment to a security-first mindset. This role can be worked 100% remotely within the united states. Candidates must have the ability to get a secret clearance.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field with 18 years of experience in DevOps/DevSecOps engineering roles. Masters and 16 years of experience.
• Candidates must be U.S. Citizens.
• Candidates must be able to get a secret clearance.
• Expert-level proficiency in Kubernetes including cluster administration, workload deployment, and security hardening, with experience in EKS and Helm.
• Extensive hands-on experience with AWS services including EKS, ECS, EC2, Lambda, VPC, IAM, KMS, Secrets Manager, S3, RDS, CloudWatch, CloudTrail, and AWS Config, with specific experience in AWS GovCloud environments.
• Strong proficiency in Infrastructure as Code using Terraform for infrastructure provisioning, management, and security scanning.
• Demonstrated experience implementing and managing CI/CD pipelines using GitLab CI/CD or GitHub Actions with strong Git workflow and GitOps experience.
• Deep understanding of FedRAMP and FISMA compliance requirements with hands-on experience implementing NIST 800-171 and 800-53 security controls, supporting authorization processes, and maintaining continuous monitoring programs.
• Experience developing and maintaining security compliance documentation including System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and security assessment artifacts.
• Proficiency with security tooling including SIEM platforms (Splunk, AWS Security Hub), vulnerability scanning (Nessus, Tenable.io), SAST/DAST tools (SonarQube, OWASP ZAP), secrets management (HashiCorp Vault, AWS Secrets Manager), and cloud security posture management using Orca Security.
• Experience integrating security controls directly into CI/CD pipelines including SAST/DAST, software composition analysis (SCA), container image scanning, and secrets detection.
• Proficiency in scripting languages such as Python for automation and tooling development.
• Experience with observability and monitoring platforms such as Prometheus, Grafana, or the ELK Stack.
• Familiarity with zero-trust architecture principles and service mesh technologies such as Istio or Linkerd.
• Relevant certifications such as CKA, CKS, AWS Certified Solutions Architect, AWS Certified Security Specialty, CISSP, or CompTIA Security+ are strongly preferred.