Senior DevSecOps Engineer

Description

SAIC has an opportunity for a DevSecOps Engineer to integrate security into the software development and delivery lifecycle. This role will design, implement, and operate secure CI/CD pipelines, cloud infrastructure, automation, and security controls that enable development teams to deliver reliable software quickly and safely. The ideal candidate combines hands-on engineering expertise with a strong understanding of application security, cloud security, and modern software delivery practices. This role partners closely with software engineers, platform teams, architects, cybersecurity teams, and compliance stakeholders.

• Design, implement, and maintain secure CI/CD pipelines across development, test, and production environments.

• Embed automated security testing into the software development lifecycle, including static application security testing, dynamic testing, software composition analysis, container scanning, and secrets detection.

• Develop and manage infrastructure as code using tools such as Terraform, CloudFormation, or Ansible.

• Implement security controls across cloud platforms, containers, Kubernetes, APIs, and enterprise applications.

• Establish and enforce policy-as-code, secure configuration standards, and deployment guardrails.

• Integrate vulnerability management findings into engineering workflows and support timely remediation.

• Partner with development teams to identify security risks, perform threat modeling, and improve secure coding practices.

• Automate security, compliance, and operational processes to improve consistency and reduce manual effort.

• Monitor pipeline, infrastructure, and application security events; support investigation and remediation of security incidents.

• Maintain technical documentation, runbooks, architecture diagrams, and control evidence.

• Contribute to security architecture reviews, technology evaluations, and continuous improvement initiatives.

• Support compliance with applicable organizational policies, contractual requirements, and regulatory frameworks.

Qualifications

• Bachelors and 5+ years or more experience; Masters and 3+ years; may accept 4 additional years of experience in lieu of degree.

• Demonstrated experience integrating security into CI/CD pipelines and cloud infrastructure.

• Proficiency with infrastructure as code tools such as Terraform, CloudFormation, or Ansible.

• Strong understanding of application security, cloud security, and secure software delivery practices.

• Ability to implement and manage automated security testing within the software development lifecycle.

• Experience collaborating with cross-functional teams including developers, architects, and cybersecurity professionals.

• Familiarity with regulatory compliance frameworks and organizational security policies.

• US Citizenship.

• Active secret clearance.

REQNUMBER: 2616763

SAIC is a premier technology integrator, solving our nation's most complex modernization and systems engineering challenges across the defense, space, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high-end solutions in systems engineering and integration; enterprise IT, including cloud services; cyber; software; advanced analytics and simulation; and training. We are a team of 23,000 strong driven by mission, united purpose, and inspired by opportunity. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $6.5 billion. For more information, visit saic.com. For information on the benefits SAIC offers, see Working at SAIC. EOE AA M/F/Vet/Disability