DevSecOps Engineer

Description SAIC is seeking DevSecOps Engineer to join our team. The DevSecOps Engineer can work at one of the following SAIC locations: San Diego, CA, Charleston, SC, or Panama City, FL. Role Overview Role: Platform Engineer building and running our internal developer platform (CI/CD, Kubernetes, pipelines and automation) for both connected and air-gapped environments. Core Tooling: GitLab for source control and pipelines; Ansible as primary automation language; Python for helpers/tests; Helm for Kubernetes deployments; MkDocs/ADRs for documentation. Platform Stack: RKE2/Kubernetes on VMware/vSphere/NSX-T, with Rancher, Cilium networking, MetalLB/Traefik ingress, cert-manager, and BIND/DNS; Harbor as the container registry. Delivery Expectations: trunk-based GitLab workflows, deterministic pipelines with built-in testing and security scans, evidence (JUnit/SBOM/scan) attached to every change, no manual “click-ops.” Supply Chain and Air-Gap Hygiene: checksum/signature/SBOM-driven movement of artifacts, RPM/PyPI mirroring via reposync and Pulp, offline scanning and promotion for high-side environments. Security and Identity: secret hygiene by default, Keycloak/SSO integration familiarity, and comfort with vulnerability/misconfig scanning in CI (SAST, IaC, secret detection, Semgrep/KICS, Trivy/pip-audit). Education Requirements Bachelor's degree and five (5) years experience; four (4) years' experience can be considered in lieu of degree. Clearance Requirements Must possess an active Secret security clearance with the ability to obtain a Top Secret clearance; US Citizenship required. Required Skills Strong background deploying and managing Kubernetes. Experience with CI/CD pipelines. Experience utilizing Helm for managing Kubernetes deployments. Familiarity with Keycloak and SSO integration. Desired Skills Load balancer/VIP experience (Keepalived, VyOS or Palo Alto), RHEL/WSUS patching familiarity, and strong documentation habits for handoffs and audits. #J-18808-Ljbffr Saic