DevSecOps Engineer
Job in
Washington, District of Columbia, 20022, USA
Listed on 2026-10-18
Listing for:
SAIC
Full Time
position Listed on 2026-10-18
Job specializations:
-
IT/Tech
Cloud Computing: Infrastructure & Operations, Cybersecurity, Systems Engineer
Job Description & How to Apply Below
Description
Position Title: Senior Cloud Dev Sec Ops Engineer
Target Environment: Multi-Cloud (AWS Commercial/Gov Cloud, GCP, Azure) & Unified Cloud Portal
Position Overview
The Senior Cloud Dev Sec Ops & Terraform Engineer will serve as a key technical contributor supporting a multi-cloud initiative. This role focuses on developing, maintaining, and automating multi-cloud infrastructure through Infrastructure as Code (IaC/Terraform), building CI/CD pipelines, and integrating backend automation with the Unified Cloud Portal and Service Catalog. The ideal candidate will combine deep expertise in cloud automation, containerization (including DoD Iron Bank hardened images), and continuous compliance scanning to ensure seamless and secure cloud provisioning across cloud enclaves.
Key Responsibilities
- Design, develop, test, and maintain modular, reusable Terraform modules for AWS (Gov Cloud/Commercial) and GCP landing zones and core services (e.g., S3, EC2, IAM, RDS).
- Establish automated Terraform deployment structures, parameterizing configurations via YAML/JSON for dynamic execution.
- Build and manage generic, configurable IAM policies, roles, and cross-account access for multi-tenant cloud environments.
- Partner with front-end developers to connect React/web applications to backend API execution workflows for service catalog requests.
- Automate end-to-end execution flows for portal user requests (e.g., resource provisioning, plan/apply/destroy pipelines, and user request history tracking).
- Implement portal authentication mechanisms (SAML, Entra / Keycloak, OIDC/SSO) and fine-grained Role-Based Access Controls (RBAC).
- Build, maintain, and standardize Git Hub Actions and Jenkins CI/CD workflows and automated pipelines for deployment and vulnerability scanning.
- Integrate automated security gates, container vulnerability scans, and code quality checks directly into deployment pipelines.
- Configure event notification handlers and API integrations (e.g., Jira, Confluence, SMTP) to track security findings and deployment status.
- Standardize containerized development environments using VS Code Dev Containers, Docker, and Department of Defense (DoD)
Iron Bank hardened container images. - Manage and administer binary artifact repositories via JFrog Artifactory to secure software supply chains.
- Perform Sonar Qube administration and infrastructure management
, configuring quality gates, server health, plugin management, and enterprise-wide static code analysis (SAST) standards.
Qualifications
Required Qualifications & Experience
- Experience: 7+ years of progressive experience in software development, cloud engineering, and Dev Sec Ops practices.
- Terraform & IaC: Mastery of Terraform module design, state management, dry runs, and cross-account automation strategies.
- Multi-Cloud Platforms: Hands-on experience with AWS (Gov Cloud & Commercial) and Google Cloud Platform (GCP) or Microsoft Azure.
- CI/CD & Source Control: Advanced experience with Git Hub Actions, Git Hub Workflows, self-hosted Git Hub runners, Jenkins, and Git repository strategies.
- Containerization & Hardening: Strong knowledge of Docker, Dev Containers,
Iron Bank container images, and container registries (ECR/Artifactory). - Security & Compliance: In-depth understanding of cloud IAM role creation, policy mapping, continuous compliance/CATO standards, and vulnerability scanning tools.
- API & Scripting: Proficiency with Linux/Bash, Python, REST APIs, JSON/YAML parsing, and backend integration workflows.
Preferred / Good-to-Have Skills
- Jenkins: Experience building and maintaining CI/CD pipelines and automation servers using Jenkins.
- Artifactory Management: Advanced experience managing artifact repositories, proxying dependencies, and securing binary life cycles.
- Sonar Qube Administration: Proven capability in administering Sonar Qube infrastructure, managing server configurations, optimizing database performance, and maintaining code quality gates across development teams.
- Iron Bank Integration: Direct experience pulling, validating, and deploying Iron Bank containerized assets within federal or secure enclaves.
- AWS Certified Solutions Architect / Dev Ops Engineer - Professional
- Google Cloud Certified Associate Cloud Engineer / Professional Cloud Architect
Preferred Certifications &…
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×