Senior DevSecOps & Systems Engineer (Full Stack)

SAIC•Sterling, VA

20d•Hybrid

About The Position

SAIC is seeking a highly skilled and versatile Senior SecDevOps & Systems Engineer with strong full-stack development capabilities to join our IT team. This role unifies three critical functions: secure DevOps automation, end-to-end systems engineering, and hands-on application development. The ideal candidate will lead the design, integration, and secure delivery of complex systems — architecting the infrastructure, building the pipelines that deploy to it, developing applications that run on it, and embedding security at every layer. This role requires deep expertise spanning software development, IT operations, systems engineering, and security engineering, with the ability to bridge gaps between systems, teams, and processes while serving as a hands-on technical leader. This position is hybrid-remote and requires 2 days on-site per week in Sterling, VA.

Requirements

Strong full-stack development capabilities
Deep expertise spanning software development, IT operations, systems engineering, and security engineering
Ability to bridge gaps between systems, teams, and processes
Hands-on technical leadership
Experience with secure CI/CD pipelines
Experience with static and dynamic application security testing (SAST/DAST)
Experience with software composition analysis (SCA)
Experience with container scanning
Experience with secrets management
Experience developing and maintaining automation workflows for software build, test, security validation, and deployment processes
Experience implementing infrastructure as code (IaC)
Experience with policy-as-code
Experience hardening operating systems, containers, and platforms to applicable security baselines (e.g., DISA STIGs, CIS Benchmarks)
Experience automating compliance verification
Experience supporting security authorization activities, including RMF/ATO documentation, vulnerability management, remediation tracking, and audit evidence generation
Experience designing, developing, and maintaining full-stack applications
Experience building and integrating RESTful and/or event-driven APIs
Experience applying secure coding practices (e.g., OWASP Top 10 mitigation)
Experience participating in code reviews with a security-first mindset
Experience developing internal tooling, dashboards, and automation utilities
Experience collaborating with development, operations, security, and other IT teams
Experience leading projects from concept through deployment and sustainment
Experience participating in formal technical and design reviews
Experience mentoring junior engineers and developers
Knowledge of emerging technologies in systems integration, SecDevOps, and application development

Responsibilities

Lead the design and implementation of integrated, end-to-end systems solutions spanning infrastructure, platform, and application layers to support enterprise objectives.
Perform systems requirements analysis, decomposition, and traceability from enterprise objectives to implemented capabilities.
Define and manage interfaces between subsystems, vendor products, and external systems, including interface control documentation.
Plan and execute integration, verification, and validation (IV&V) activities to prove systems meet functional, performance, and security requirements.
Conduct systems analysis, trade studies, and capacity planning to identify opportunities for optimization; document and defend technical decisions in formal reviews.
Manage and monitor integrated systems to ensure high availability, performance, and security; lead root cause analysis and implement strategic corrective actions.
Architect, implement, and maintain secure CI/CD pipelines with integrated security gates, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), container scanning, and secrets management.
Develop and maintain robust automation workflows for software build, test, security validation, and deployment processes.
Implement infrastructure as code (IaC) with embedded security policy enforcement (policy-as-code) for cloud and hybrid environments.
Harden operating systems, containers, and platforms to applicable security baselines (e.g., DISA STIGs, CIS Benchmarks) and automate compliance verification.
Support security authorization activities, including RMF/ATO documentation, vulnerability management, remediation tracking, and audit evidence generation.
Ensure systems integration and delivery align with industry best practices and applicable compliance and security standards.
Provide expert guidance on SecDevOps tools and practices, facilitating knowledge sharing and maturing the organization's SecDevOps culture.
Design, develop, and maintain full-stack applications, including responsive front-end interfaces, back-end services and APIs, and supporting data layers.
Build and integrate RESTful and/or event-driven APIs between internal systems, vendor products, and external services.
Apply secure coding practices (e.g., OWASP Top 10 mitigation) and participate in code reviews with a security-first mindset.
Develop internal tooling, dashboards, and automation utilities that enhance operational visibility and team efficiency.
Collaborate with development, operations, security, and other IT teams to ensure seamless, high-quality, secure software delivery.
Lead projects from concept through deployment and sustainment, participating in formal technical and design reviews.
Mentor junior engineers and developers across DevOps, systems, and software disciplines.
Stay current with emerging technologies in systems integration, SecDevOps, and application development, recommending adoption where beneficial.