{bc}
Apply
oracle

DevSecOps Engineer

SAIC
Washington, USA
Senior · 7+ years experience
Onsite
Discovered 1 weeks ago
awsazurebashdockergcpgit

Full Job Posting

Key Responsibilities

  • Infrastructure as Code (IaC) & Cloud Automation (Terraform)
  • Design, develop, test, and maintain modular, reusable Terraform modules for AWS (GovCloud/Commercial) and GCP landing zones and core services (e.g., S3, EC2, IAM, RDS).
  • Establish automated Terraform deployment structures, parameterizing configurations via YAML/JSON for dynamic execution.
  • Build and manage generic, configurable IAM policies, roles, and cross-account access for multi-tenant cloud environments.
  • Unified Portal (T-Portal) & Service Catalog Integration
  • Partner with front-end developers to connect React/web applications to backend API execution workflows for service catalog requests.
  • Automate end-to-end execution flows for portal user requests (e.g., resource provisioning, plan/apply/destroy pipelines, and user request history tracking).
  • Implement portal authentication mechanisms (SAML, Entra ID / Keycloak, OIDC/SSO) and fine-grained Role-Based Access Controls (RBAC).
  • DevSecOps, CI/CD, & Continuous Compliance
  • Build, maintain, and standardize GitHub Actions and Jenkins CI/CD workflows and automated pipelines for deployment and vulnerability scanning.
  • Integrate automated security gates, container vulnerability scans, and code quality checks directly into deployment pipelines.
  • Configure event notification handlers and API integrations (e.g., Jira, Confluence, SMTP) to track security findings and deployment status.
  • Containerization, Artifact Management, & Code Quality Infrastructure
  • Standardize containerized development environments using VS Code Dev Containers, Docker, and Department of Defense (DoD) Iron Bank hardened container images.
  • Manage and administer binary artifact repositories via JFrog Artifactory to secure software supply chains.
  • Perform SonarQube administration and infrastructure management, configuring quality gates, server health, plugin management, and enterprise-wide static code analysis (SAST) standards.

Qualifications

  • Required Qualifications & Experience
  • Experience: 7+ years of progressive experience in software development, cloud engineering, and DevSecOps practices.
  • Terraform & IaC: Mastery of Terraform module design, state management, dry runs, and cross-account automation strategies.
  • Multi-Cloud Platforms: Hands-on experience with AWS (GovCloud & Commercial) and Google Cloud Platform (GCP) or Microsoft Azure.
  • CI/CD & Source Control: Advanced experience with GitHub Actions, GitHub Workflows, self-hosted GitHub runners, Jenkins, and Git repository strategies.
  • Containerization & Hardening: Strong knowledge of Docker, Dev Containers, Iron Bank container images, and container registries (ECR/Artifactory).
  • Security & Compliance: In-depth understanding of cloud IAM role creation, policy mapping, continuous compliance/CATO standards, and vulnerability scanning tools.
  • API & Scripting: Proficiency with Linux/Bash, Python, REST APIs, JSON/YAML parsing, and backend integration workflows.
  • Preferred / Good-to-Have Skills
  • Jenkins: Experience building and maintaining CI/CD pipelines and automation servers using Jenkins.
  • Artifactory Management: Advanced experience managing artifact repositories, proxying dependencies, and securing binary lifecycles.
  • SonarQube Administration: Proven capability in administering SonarQube infrastructure, managing server configurations, optimizing database performance, and maintaining code quality gates across development teams.
  • Iron Bank Integration: Direct experience pulling, validating, and deploying Iron Bank containerized assets within federal or secure enclaves.
  • AWS Certified Solutions Architect / DevOps Engineer – Professional
  • Google Cloud Certified Associate Cloud Engineer / Professional Cloud Architect
  • Preferred Certifications & Clearances
  • Security Clearance: Must be eligible to obtain or possess an active Public Trust (U.S. Citizenship or Green Card required)
  • 7+ years of progressive experience in software development, cloud engineering, and DevSecOps practices.

Preferred Qualifications

  • Preferred / Good-to-Have Skills
  • Preferred Certifications & Clearances

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at SAIC

Drafter/CAD Operator

Bedford, USA

Discovered Today

TWF Air Traffic Control Instructor-II

Twin Falls, USA

Discovered Today

Supply Technician

North Charleston, USA

Discovered Today

Senior MBSE Engineer

El Segundo, USA

Discovered Today

Systems Administrator

San Diego, USA

Discovered Today

Infrastructure Operations Manager

Washington, USA

Discovered Yesterday

Acquisition Systems Engineer

Chantilly, USA

Discovered 2 days ago

Senior Drupal Developer

Washington, USA

Discovered 2 days ago