DevSecOps Engineer Principal

SAIC; Alabama; Remote; USD 120,000 - 160,000; Full time

Job summary

Join a leading company as a BMC3 DevSecOps Engineer to support national security through software development for the Space Development Agency. You'll work on critical applications, utilizing cloud technologies and modern development practices. This role offers the chance to make a significant impact in a dynamic environment, requiring strong analytical and coding skills, along with a commitment to security protocols. Ideal candidates will have a Bachelor's degree and extensive experience in software development and cloud architecture.

Qualifications

• Bachelor's degree and 9+ years experience; Master's and 4+ years.
• Security + or higher certification required.

Responsibilities

• Code, test, debug, document and deploy custom applications.
• Build and debug CI/CD pipelines for Third-Party Application Developers.

Skills

Analytical

Automation

Coding

Education

Bachelor's

Master's

Tools

GitLab

Docker

AWS

Job description

Make a difference for national security by joining a team of dedicated professionals in supporting the Space Development Agency (SDA) in developing and deploying the Battle Management Command, Control, and Communications (BMC3) software development and hosting environment for the Proliferated Warfighter Space Architecture (PWSA). These systems establish software development capabilities to securely and rapidly field mission applications developed by BMC3 ecosystem participants in support of Joint All Domain Command and Control (JADC2) objectives.

SAIC has an immediate need for a BMC3 DevSecOps Engineer who can train, troubleshoot, and educate strategic partners on IL-5 Software development to support Space Operations for the PWSA. The candidate for this position will work primarily with Impact Level 5 (IL5) information and may require travel to – Redstone Arsenal, Grand Forks, ND. Other locations with access to an IL5 ; with the role p rimarilyremote.

Primary responsibilities include:

•Code, test, debug, document and deploy custom applications.
•Understanding of Compiled Software Build Processes.
•Assist Application Development technical teams with App Development in BMC3 platform with effective with Infrastructure as Code (IaC) or Configuration as Code (CaC).
•Program scrip logic from customer-defined specifications to build code in the SW Factory.
•Follow BMC3 policy and Understand business, technical, and program requirements to Educate Outside Vendor on Modern SW Development practices.
•Apply analytical, automation, and coding skills in all phases of the Software Development Life Cycle (SDLC).
•Prepare Lean and SAFe Scrim methodology documentation.
•Build, use, debug CI/CD pipelines to support Third-Party Application Developers.
•Use Cloud based tool stacks (e.g., VSCode, Gitlab, Docker, K8’s, Anchore, Artifactory, CloudTrial, Fortify, Guacamole, Jenkins, Kiali, Mattermost, Neuvector, NEXUS,OWASP, Prometheus, Sonarqube, Syft, Terraform, Velero, and AWS services) for development.
•Minimum Information Assurance System Architecture and Engineering (IASAE) Level II certified IAW DoD 8570.01M (Security+).
•Knowledge of DoD Policies and procedures including DoD 8500.01 and DoD 8510.01.

Secondary responsibilities Include:

•Educate in best practices for architecture, plan, configure, deploy, maintain, and upgrade COTS/GOTS and custom toolsets to address vulnerabilities and/or implement security controls.
•Design, test, and implement secure operating systems, networks, security monitoring, tuning and management of IT security systems and applications.
•Incident response, digital forensics, loss prevention, and eDiscovery actions. Includes security control design and solution planning at the system, mission, and enterprise level, security-in-depth/defense-in-depth, and other related IAM/ISSO/ISSE support functions.
•Remediate finding by leveraging and enhancing Cloud One Infrastructure as Code (IAC).

Qualifications

Requirements:

•Bachelor’s and nine (9) years or more experience; Masters and four (4) years or more experience.
•Security + or higher certification (Possess a DoD 8570 IAT Level II Certification ).

CLEARANCE:

•Must be a U.S. Citizen with an Active Secret clearance.

Desired Skills and Certifications:

Description

Make a difference for national security by joining a team of dedicated professionals in supporting the Space Development Agency (SDA) in developing and deploying the Battle Management Command, Control, and Communications (BMC3) software development and hosting environment for the Proliferated Warfighter Space Architecture (PWSA). These systems establish software development capabilities to securely and rapidly field mission applications developed by BMC3 ecosystem participants in support of Joint All Domain Command and Control (JADC2) objectives.

SAIC has an immediate need for a BMC3 DevSecOps Engineer who can train, troubleshoot, and educate strategic partners on IL-5 Software development to support Space Operations for the PWSA. The candidate for this position will work primarily with Impact Level 5 (IL5) information and may require travel to – Redstone Arsenal, Grand Forks, ND. Other locations with access to an IL5 ; with the role p rimarilyremote.

Primary responsibilities include:

•Code, test, debug, document and deploy custom applications.
•Understanding of Compiled Software Build Processes.
•Assist Application Development technical teams with App Development in BMC3 platform with effective with Infrastructure as Code (IaC) or Configuration as Code (CaC).
•Program scrip logic from customer-defined specifications to build code in the SW Factory.
•Follow BMC3 policy and Understand business, technical, and program requirements to Educate Outside Vendor on Modern SW Development practices.
•Apply analytical, automation, and coding skills in all phases of the Software Development Life Cycle (SDLC).
•Prepare Lean and SAFe Scrim methodology documentation.
•Build, use, debug CI/CD pipelines to support Third-Party Application Developers.
•Use Cloud based tool stacks (e.g., VSCode, Gitlab, Docker, K8’s, Anchore, Artifactory, CloudTrial, Fortify, Guacamole, Jenkins, Kiali, Mattermost, Neuvector, NEXUS,OWASP, Prometheus, Sonarqube, Syft, Terraform, Velero, and AWS services) for development.
•Minimum Information Assurance System Architecture and Engineering (IASAE) Level II certified IAW DoD 8570.01M (Security+).
•Knowledge of DoD Policies and procedures including DoD 8500.01 and DoD 8510.01.

Secondary responsibilities Include:

•Educate in best practices for architecture, plan, configure, deploy, maintain, and upgrade COTS/GOTS and custom toolsets to address vulnerabilities and/or implement security controls.
•Design, test, and implement secure operating systems, networks, security monitoring, tuning and management of IT security systems and applications.
•Incident response, digital forensics, loss prevention, and eDiscovery actions. Includes security control design and solution planning at the system, mission, and enterprise level, security-in-depth/defense-in-depth, and other related IAM/ISSO/ISSE support functions.
•Remediate finding by leveraging and enhancing Cloud One Infrastructure as Code (IAC).

Qualifications

Requirements:

•Bachelor’s and nine (9) years or more experience; Masters and four (4) years or more experience.
•Security + or higher certification (Possess a DoD 8570 IAT Level II Certification ).

CLEARANCE:

•Must be a U.S. Citizen with an Active Secret clearance.

Desired Skills and Certifications:

•Experience integrating large, complex software systems comprised of inputs from numerous sources.
•Experience with cloud architecture and implementation features (OS, multi-tenancy, virtualization, orchestration, elastic scalability).
•Act as a Subject Matter Expert to the organization for programming applications and microservices deployed to Space and Ground Systems.
•CI/CD with Jenkins, GitLab, Bitbucket, BigBang Deployment, or Platform One experience.
•Strong software development skills and demonstrated experience in current languages such as C/C++, Rust, Javascript, and Python.
•Knowledge of how web services work and how to use them (Ex: REST APIs, JSON, etc.).
•SW Integrated Development Environments (IDE).
•Ability to interface with all levels of project management.

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.
SAIC accepts applications on an ongoing basis and there is no deadline.

Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.

Receive tips & info on cleared job search, security clearances and career development.