Senior DevSecOps Engineer

SAIC•Upper Grand Lagoon, FL

13d

About The Position

SAIC is hiring a DevSecOps Engineer to integrate security into the software development and delivery lifecycle. The role designs, implements, and operates secure CI/CD pipelines, cloud infrastructure, automation, and security controls so development teams can deliver reliable software quickly and safely. The position combines hands-on engineering with application security, cloud security, and modern software delivery practices, and works closely with software engineers, platform teams, architects, cybersecurity teams, and compliance stakeholders.

Requirements

Bachelor’s degree and 5 or more years of experience, or a master’s degree and 3 or more years of experience; may accept 4 additional years of experience in lieu of a degree.
Demonstrated experience integrating security into CI/CD pipelines and cloud infrastructure.
Proficiency with infrastructure as code tools such as Terraform, CloudFormation, or Ansible.
Strong understanding of application security, cloud security, and secure software delivery practices.
Ability to implement and manage automated security testing within the software development lifecycle.
Experience collaborating with cross-functional teams including developers, architects, and cybersecurity professionals.
Familiarity with regulatory compliance frameworks and organizational security policies.
U.S. citizenship.
Active Secret clearance.

Responsibilities

Design, implement, and maintain secure CI/CD pipelines across development, test, and production environments.
Embed automated security testing into the software development lifecycle, including static application security testing, dynamic testing, software composition analysis, container scanning, and secrets detection.
Develop and manage infrastructure as code using tools such as Terraform, CloudFormation, or Ansible.
Implement security controls across cloud platforms, containers, Kubernetes, APIs, and enterprise applications.
Establish and enforce policy-as-code, secure configuration standards, and deployment guardrails.
Integrate vulnerability management findings into engineering workflows and support timely remediation.
Partner with development teams to identify security risks, perform threat modeling, and improve secure coding practices.
Automate security, compliance, and operational processes to improve consistency and reduce manual effort.
Monitor pipeline, infrastructure, and application security events; support investigation and remediation of security incidents.
Maintain technical documentation, runbooks, architecture diagrams, and control evidence.
Contribute to security architecture reviews, technology evaluations, and continuous improvement initiatives.
Support compliance with applicable organizational policies, contractual requirements, and regulatory frameworks.