Remote Principal DevSecOps Engineer: Cloud & Kubernetes

Saic

Virginia (MN)

Hybrid

USD 120,000 - 160,000

Full time

5 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

SAIC is seeking an experienced DevSecOps Engineer Principal to design, deploy, operate, and maintain secure cloud products and services in a cloud-based environment. This role offers 100% remote work within the United States and requires the ability to obtain a secret clearance.

The candidate will lead Kubernetes, IaC (Terraform), and CI/CD implementations, with strong GovCloud and FedRAMP/FISMA expertise, to deliver secure, scalable solutions while maintaining security documentation and

Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field with 9+ years of experience in DevOps/DevSecOps roles; Masters and 7 years experience.
Candidates must be U.S. Citizens.
Candidates must be able to get a secret clearance.
Expert-level Kubernetes including cluster administration, workload deployment, and security hardening, with experience in EKS and Helm.
Extensive hands-on experience with AWS services including EKS, ECS, EC2, Lambda, VPC, IAM, KMS, Secrets Manager, S3, RDS, CloudWatch, CloudTrail, and AWS Config, with specific experience in AWS GovCloud environments.
Strong proficiency in Infrastructure as Code using Terraform for infrastructure provisioning, management, and security scanning.
Experience implementing CI/CD pipelines using GitLab CI/CD or GitHub Actions with strong Git workflow and GitOps experience.
Deep understanding of FedRAMP and FISMA compliance requirements with hands‑on experience implementing NIST 800-171 and 800-53 security controls, supporting authorization processes, and maintaining continuous monitoring programs.
Experience developing and maintaining security compliance documentation including SSPs, POA&Ms, and security assessment artifacts.
Proficiency with security tooling including SIEM platforms (Splunk, AWS Security Hub), vulnerability scanning (Nessus, Tenable.io), SAST/DAST tools (SonarQube, OWASP ZAP), secrets management (HashiCorp Vault, AWS Secrets Manager), and cloud security posture management using Orca Security.
Experience integrating security controls directly into CI/CD pipelines including SAST/DAST, software composition analysis (SCA), container image scanning, and secrets detection.
Proficiency in scripting languages such as Python for automation and tooling development.
Experience with observability and monitoring platforms such as Prometheus, Grafana, or the ELK Stack.
Familiarity with zero-trust architecture principles and service mesh technologies such as Istio or Linkerd.
Relevant certifications such as CKA, CKS, AWS Certified Solutions Architect, AWS Certified Security Specialty, CISSP, or CompTIA Security+ are strongly preferred.

Responsibilities

Design, deploy, operate, and maintain secure, scalable Cloud products and services.
Ensure security-first culture in development and operations and automate processes.
Implement and maintain CI/CD pipelines with GitLab CI/CD or GitHub Actions.
Support FedRAMP/FISMA compliance and continuous monitoring programs.
Collaborate across teams to integrate security into development and operations.