SAIC
Senior DevSecOps & Systems Engineer (Full Stack)
- Compensation
- Not disclosed
- Location
- Sterling, VA, United States
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Fullstack
- Posted
Skills
Must have
- Strong expertise in DevOps/SecDevOps methodologies and tools (e.g., Jenkins, GitLab CI, Git, Ansible, Docker, Kubernetes).
- Demonstrated experience integrating security into CI/CD pipelines (SAST, DAST, SCA, container scanning, secrets management).
- Proficiency in scripting languages (e.g., Python, Bash, PowerShell) for automation tasks.
- Full-stack development proficiency, including a modern front-end framework (e.g., React, Angular, or Vue), a back-end language/framework (e.g., Node.js/TypeScript, Python, Java, or .NET), and relation
- Experience designing, building, and consuming RESTful APIs.
- Experience with cloud services (AWS, Azure, Google Cloud), their management APIs, and cloud security services (e.g., IAM, key management, network security controls).
- Systems engineering experience, including requirements analysis, systems integration, interface management, and verification and validation.
- Experience with Linux and/or Windows server engineering, virtualization, and network fundamentals in enterprise or hybrid environments.
- Knowledge of security hardening baselines (DISA STIGs, CIS Benchmarks) and vulnerability management practices.
- Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environment.
- Strong communication and collaboration skills to work effectively across teams.
- Proven ability to lead projects and mentor junior team members.
Nice to have
- Certifications in security, DevOps, or cloud computing (e.g., CISSP, Security+, CKA/CKS, AWS Certified DevOps Engineer, AWS Certified Security – Specialty).
- Experience with infrastructure as code using Terraform or CloudFormation, and policy-as-code tools (e.g., OPA, Sentinel).
- Experience supporting RMF/ATO processes, NIST SP 800-53 controls, or FedRAMP environments.
- Understanding of microservices architecture, container orchestration at scale, and API gateway patterns.
- Experience with model-based systems engineering (MBSE) or formal requirements management tools (e.g., DOORS, Jama).
- Experience with observability and monitoring stacks (e.g., Prometheus, Grafana, ELK, Splunk).
- Active security clearance or the ability to obtain one.
Full description
SAIC is seeking a highly skilled and versatile Senior SecDevOps & Systems Engineer with strong full-stack development capabilities to join our IT team. This role unifies three critical functions: secure DevOps automation, end-to-end systems engineering, and hands-on application development. The ideal candidate will lead the design, integration, and secure delivery of complex systems — architecting the infrastructure, building the pipelines that deploy to it, developing applications that run on it, and embedding security at every layer.
This role requires deep expertise spanning software development, IT operations, systems engineering, and security engineering, with the ability to bridge gaps between systems, teams, and processes while serving as a hands-on technical leader.
This position is hybrid-remote and requires 2 days on-site per week in Sterling, VA.Systems Engineering & Integration Responsibilities:
- Lead the design and implementation of integrated, end-to-end systems solutions spanning infrastructure, platform, and application layers to support enterprise objectives.
- Perform systems requirements analysis, decomposition, and traceability from enterprise objectives to implemented capabilities.
- Define and manage interfaces between subsystems, vendor products, and external systems, including interface control documentation.
- Plan and execute integration, verification, and validation (IV&V) activities to prove systems meet functional, performance, and security requirements.
- Conduct systems analysis, trade studies, and capacity planning to identify opportunities for optimization; document and defend technical decisions in formal reviews.
- Manage and monitor integrated systems to ensure high availability, performance, and security; lead root cause analysis and implement strategic corrective actions.
SecDevOps & Automation Responsibilities:
- Architect, implement, and maintain secure CI/CD pipelines with integrated security gates, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), container scanning, and secrets management.
- Develop and maintain robust automation workflows for software build, test, security validation, and deployment processes.
- Implement infrastructure as code (IaC) with embedded security policy enforcement (policy-as-code) for cloud and hybrid environments.
- Harden operating systems, containers, and platforms to applicable security baselines (e.g., DISA STIGs, CIS Benchmarks) and automate compliance verification.
- Support security authorization activities, including RMF/ATO documentation, vulnerability management, remediation tracking, and audit evidence generation.
- Ensure systems integration and delivery align with industry best practices and applicable compliance and security standards.