DevSecOps Engineer

Description

SAIC is seeking Dev Sec Ops  Engineer to join our team. The Dev Sec Ops  Engineer can work at one of the following SAIC locations:
San Diego, CA, Charleston, SC, or Panama City, FL.

• Role: Platform Engineer building and running our internal developer platform (CI/CD, Kubernetes, pipelines and automation) for both connected and air-gapped environments.
• Core Tooling: Git Lab for source control and pipelines;
  Ansible as the primary automation language;
  Python for helpers/tests;
  Helm for Kubernetes deployments;
  MkDocs/ADRs for documentation.
• Platform Stack: RKE2/Kubernetes on VMware/vSphere/NSX-T, with Rancher, Cilium networking, MetalLB/Traefik ingress, cert-manager, and BIND/DNS;
  Harbor as the container registry.
• Delivery Expectations: trunk-based Git Lab workflows, deterministic pipelines with built-in testing and security scans, evidence (JUnit/SBOM/scan) attached to every change, no manual “click-ops.”
• Supply Chain and Air-Gap Hygiene: checksum/signature/SBOM-driven movement of artifacts, RPM/PyPI mirroring via reposync and Pulp, offline scanning and promotion for high-side environments.
• Security and Identity: secret hygiene by default, Keycloak/SSO integration familiarity, and comfort with vulnerability/misconfig scanning in CI (SAST, IaC, secret detection, Semgrep/KICS, Trivy/pip-audit).

• Education Requirements: Bachelors degree and five (5) years experience; additional four (4) years' experience can be considered in lieu of degree.

• Must possess an active Secret security clearance with the ability to obtain a Top Secret / SCI clearance; US Citizenship required.

• Strong background deploying and managing Kubernetes.
• Experience with CI/CD pipelines.
• Experience utilizing Helm for managing Kubernetes deployments.
• Familiarity with Keycloak and SSO integration.

• Load balancer/VIP experience (Keepalived, VyOS or Palo Alto), RHEL/WSUS patching familiarity, and strong documentation habits for handoffs and audits.