Senior DevSecOps Engineer

SAIC; Panama City Beach (FL); On-site; USD 80,000 - 120,000; Full time

Job summary

SAIC is seeking a DevSecOps Engineer to integrate security into the software development and delivery lifecycle. The role focuses on secure CI/CD pipelines, cloud infrastructure, automation, and security controls to enable fast, safe software delivery.

You will embed automated security testing, manage IaC with Terraform/CloudFormation/Ansible, and implement security across cloud platforms and containers. Collaboration with engineering, cybersecurity, and compliance teams is essential.

Qualifications

• Bachelors and 5+ years or Masters and 3+ years; may accept 4 additional years of experience in lieu of degree.
• Experience integrating security into CI/CD pipelines and cloud infrastructure.
• Proficiency with infrastructure as code tools such as Terraform, CloudFormation, or Ansible.
• Strong understanding of application security, cloud security, and secure software delivery practices.
• Ability to implement and manage automated security testing within the software development lifecycle.
• Experience collaborating with cross-functional teams including developers, architects, and cybersecurity professionals.
• Familiarity with regulatory compliance frameworks and organizational security policies.
• US Citizenship and Active secret clearance required.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines across development, test, and production environments.
• Embed automated security testing into the SDLC, including SAST, DAST, SCA, container scans, and secrets detection.
• Develop and manage infrastructure as code using Terraform, CloudFormation, or Ansible.
• Implement security controls across cloud platforms, containers, Kubernetes, APIs, and enterprise applications.
• Establish policy-as-code, secure configuration standards, and deployment guardrails.
• Integrate vulnerability management findings into engineering workflows and remediation.
• Partner with development teams to identify security risks and improve secure coding practices.
• Automate security, compliance, and operational processes to improve consistency.
• Monitor security events and support investigation and remediation of incidents.
• Maintain technical documentation, runbooks, and architecture diagrams.

Skills

CI/CD security

Cloud security

Application security

Threat modeling

Automation

Security testing

Cross-functional collaboration

Regulatory compliance

US citizenship

Active clearance

Education

Bachelor's degree

Master's degree

Tools

Terraform

CloudFormation

Ansible

Kubernetes

Job description

Description

SAIC has an opportunity for a DevSecOps Engineer to integrate security into the software development and delivery lifecycle. This role will design, implement, and operate secure CI/CD pipelines, cloud infrastructure, automation, and security controls that enable development teams to deliver reliable software quickly and safely. The ideal candidate combines hands-on engineering expertise with a strong understanding of application security, cloud security, and modern software delivery practices. This role partners closely with software engineers, platform teams, architects, cybersecurity teams, and compliance stakeholders.

• Design, implement, and maintain secure CI/CD pipelines across development, test, and production environments.
• Embed automated security testing into the software development lifecycle, including static application security testing, dynamic testing, software composition analysis, container scanning, and secrets detection.
• Develop and manage infrastructure as code using tools such as Terraform, CloudFormation, or Ansible.
• Implement security controls across cloud platforms, containers, Kubernetes, APIs, and enterprise applications.
• Establish and enforce policy-as-code, secure configuration standards, and deployment guardrails.
• Integrate vulnerability management findings into engineering workflows and support timely remediation.
• Partner with development teams to identify security risks, perform threat modeling, and improve secure coding practices.
• Automate security, compliance, and operational processes to improve consistency and reduce manual effort.
• Monitor pipeline, infrastructure, and application security events; support investigation and remediation of security incidents.
• Maintain technical documentation, runbooks, architecture diagrams, and control evidence.
• Contribute to security architecture reviews, technology evaluations, and continuous improvement initiatives.
• Support compliance with applicable organizational policies, contractual requirements, and regulatory frameworks.

Qualifications

• Bachelors and 5+ years or more experience; Masters and 3+ years; may accept 4 additional years of experience in lieu of degree.
• Demonstrated experience integrating security into CI/CD pipelines and cloud infrastructure.
• Proficiency with infrastructure as code tools such as Terraform, CloudFormation, or Ansible.
• Strong understanding of application security, cloud security, and secure software delivery practices.
• Ability to implement and manage automated security testing within the software development lifecycle.
• Experience collaborating with cross-functional teams including developers, architects, and cybersecurity professionals.
• Familiarity with regulatory compliance frameworks and organizational security policies.
• US Citizenship.
• Active secret clearance.

Target salary range: $80,001 - $120,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.