Senior DevSecOps Engineer

SAIC is a mission integrator focused on applying technology and innovation to serve and protect the world. The Senior DevSecOps Engineer will maintain secure hybrid Linux and Windows environments, improve infrastructure stability and performance, and support modern DevOps practices. The role focuses on continuous monitoring, infrastructure automation, CI/CD pipeline management, vulnerability remediation, and cybersecurity compliance.

Responsibilities:

• Implement tools and processes for the continuous monitoring of infrastructure, pipelines, and applications
• Use monitoring and logging platforms to analyze system health and performance, troubleshoot issues, and resolve incidents quickly
• Contribute to essential maintenance of the platforms by weekly upgrading and patching of the application factory and its underlying infrastructure
• Manage, maintain, and troubleshoot both Linux and Windows systems, ensuring peak performance, scalability, and reliability
• Perform regular patches, upgrades, and system hardening to address vulnerabilities and improve overall system security
• Proactively identify and mitigate risks, ensuring compliance with security policies and best practices
• Automate configurations for sustainable management at build time of the environment
• Develop and maintain Infrastructure as Code (IaC) workflows for infrastructure provisioning and configuration management using tools like Packer, Terraform, Ansible, and scripts
• Perform updates, patches, and cyber review for self-hosted Amazon AMI with focus on automation and hardening of components
• Manage and optimize CI/CD pipelines in Gitlab to facilitate efficient and secure software delivery
• Collaborate with development teams to ensure uptime and smooth usage of pipelines for application development in Gitlab
• Perform continuous patching of pipeline tools to ensure cybersecurity standards are maintained
• Apply a security-first mindset to all aspects of environment and pipeline management
• Conduct vulnerability assessments and remediate risks through patching, configuration, and process improvement
• Ensure systems and processes adhere to compliance frameworks, including CIS, NIST, ISO, and DoD regulations for air gapped IL5 environments
• Implement security controls such as Role-Based Access Control (RBAC), secure namespaces, and strong monitoring/auditing practices
• Work in close collaboration with development teams, operations staff, and cybersecurity professionals to align on security and performance goals
• Support cross-functional teams in designing and implementing scalable, secure, and resilient infrastruc

Requirements:

• Bachelors and five (5) years or more experience; Masters and three (3) years or more experience; PhD and 0 years related experience with six years of experience
• Security+ Certification
• Must an active Secret Clearance
• Monitoring Tools: Prometheus, Grafana, ELK Stack, Splunk, or equivalent
• Automation: Terraform, Ansible, Packer, Gitlab , and CI/CD pipelines
• Scripting Languages: Bash, Python, PowerShell
• Operating Systems: Expertise in Linux (preferred distributions: RHEL, CentOS, Ubuntu) and working knowledge of Windows Server environments
• Cloud and Virtualization: Experience in managing AWS cloud environments
• Security Standards: Familiarity with cybersecurity frameworks and best practices (e.g., DoD STIGs, NIST, CIS benchmarks)