DevSecOps Engineer

SAIC is hiring a DevSecOps Engineer to modernize and manage secure Windows and Linux infrastructure, with a focus on Active Directory, Domain Controllers, Infrastructure as Code, and automation. The role maintains IL5 environments and collaborates with development, systems administration, and cybersecurity teams to deploy resilient infrastructure, applications, and CI/CD pipelines while meeting security and compliance requirements.

Responsibilities:

• Deploy, configure, maintain, and troubleshoot Active Directory (AD) and Domain Controller (DC) environments in a hybrid or on-premise Windows environment
• Maintain the integrity and security of AD forests, domains, and trusted environments
• Harden Active Directory and Domain Controller configurations following DoD STIG compliance and industry best practices
• Manage Group Policy Objects (GPOs) and enforce security policies using tailored configurations
• Ensure monitoring, logging, and auditing capabilities are in place to track AD/Domain Controller performance and security
• Ensure security best practices, including Role-Based Access Control (RBAC), namespace isolation, and secure ingress/egress traffic configurations
• Create AWS AMI for Windows Servers using Packer, Ansible, and powershell
• Work within a secure, air-gapped IL5 environment and implement robust processes to ensure compliance with DoD or other regulatory frameworks
• Implement and ensure the security and availability of Windows and Linux systems, including patch management, vulnerability assessments, and compliance with organizational policies
• Automate recurring tasks using scripting tools like PowerShell, Ansible, Python, Bash or Powershell to improve operational efficiency
• Troubleshoot issues within Windows (file systems, network connectivity, performance, and authentication)
• Plan and execute upgrades, migrations, and installations for both Windows and Linux systems
• Collaborate with cross-functional teams to ensure systems integration and operational effectiveness
• Develop and deliver technical documentation, including CI/CD pipeline configurations, workflow processes, and build instructions

Requirements:

• Technical Education/Clearance
• Must have BS Degree with (6) six years of experience
• Security+ Certification
• Must an active Secret Clearance
• Strong knowledge of Active Directory architecture, including replication, forests, and domains
• Proficiency with Windows Server administration, roles, and features
• Comprehensive Understanding with security frameworks, such as NIST or ISO, and their application in AD/DC environments
• Experience in integrating authentication/SSO identity solutions including but not limited to Keycloak, Active Directory, SAML integration with SSO in tools, RBAC best practices within AD
• Proficiency with GitLab CI/CD and Git-based workflows to version control and orchestrate pipelines
• Knowledge and experience working in secure environments, specifically Impact Level 6 (IL6) or similarly controlled environments, with a strong understanding of DoD or equivalent compliance frameworks
• Proficiency in tools for security automation:
• Image Scanning Tools (e.g., Anchore)
• Static Code Analysis Tools (e.g., SonarQube)
• Software Signing Tools (e.g., Cosign) for image and binary integrity verification
• Hands-on experience with container hardening and vulnerability remediation
• Strong scripting and automation skills for automating configuration, build, and deployment processes
• Proficiency with Infrastructure as Code (IaC) tools like Terraform, Helm, or Ansible for provisioning and managing secure environments
• Ability to effectively communicate complex technical concepts to developers, security teams, and stakeholders
• Proven experience collaborating in multidisciplinary teams within Agile or DevSecOps methodologies