2 months ago
Remote, United StatesStaff+
Responsibilities
- Design, deploy, operate, and maintain secure and scalable cloud products and services.
- Administer, deploy workloads to, and harden Kubernetes clusters, including EKS, using Helm.
- Provision and manage infrastructure with Terraform, including security scanning.
- Develop and maintain CI/CD pipelines using GitLab CI/CD or GitHub Actions and integrate security controls such as SAST/DAST, software composition analysis, container image scanning, and secrets detection.
- Implement FedRAMP, FISMA, NIST 800-171, and NIST 800-53 security controls and support authorization and continuous monitoring processes.
- Create and maintain System Security Plans, Plans of Action and Milestones, and security assessment artifacts.
- Operate security, vulnerability scanning, secrets management, cloud security posture management, monitoring, and observability tooling.
- Develop Python automation and tooling and support zero-trust and service mesh implementations.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field plus 9+ years of DevOps/DevSecOps experience, or a master's degree plus 7 years of experience.
- U.S. citizenship and the ability to obtain a secret clearance are required.
- Expert Kubernetes experience, including cluster administration, workload deployment, security hardening, EKS, and Helm.
- Extensive AWS experience, including AWS GovCloud and services such as EKS, ECS, EC2, Lambda, VPC, IAM, KMS, Secrets Manager, S3, RDS, CloudWatch, CloudTrail, and AWS Config.
- Experience with Terraform, GitLab CI/CD or GitHub Actions, Git workflows, and GitOps.
- Deep understanding of FedRAMP and FISMA requirements and hands-on experience with NIST 800-171 and NIST 800-53 controls.
- Experience with Splunk, AWS Security Hub, Nessus, Tenable.io, SonarQube, OWASP ZAP, HashiCorp Vault, Orca Security, Prometheus, Grafana, or the ELK Stack.
- Experience with Python automation, zero-trust architecture, and service mesh technologies such as Istio or Linkerd.
- Preferred certifications include CKA, CKS, AWS Certified Solutions Architect, AWS Certified Security Specialty, CISSP, or CompTIA Security+.
Benefits
- The role can be worked 100% remotely within the United States.
Tech Stack
About SAIC
SAIC (Science Applications International Corporation) is a government technology integrator delivering systems engineering, enterprise IT, secure cloud, cybersecurity, C5ISR, and data analytics for U.S. defense, space, intelligence, and civilian agencies. It builds and sustains mission IT and digital engineering solutions under multi-year federal contracts and task orders. Founded in 1969, SAIC is headquartered in Reston, Virginia, and is a public company traded on the NYSE under the ticker SAIC.