2 days ago
Washington, DC, USAStaff+
Responsibilities
- Design, maintain, and govern GCP landing zones using Assured Workloads for FedRAMP Moderate and FedRAMP High environments.
- Define enterprise cloud boundaries, organizational policies, data residency controls, CMEK governance, shared networking, and tenant workload responsibilities.
- Develop modular Terraform code and automate landing zone vending, subnet allocation, IAM, project provisioning, state management, and drift resolution.
- Implement VPC Service Controls, Workload Identity Federation, service account governance, RBAC, and zero-trust access patterns.
- Architect CI/CD pipelines with GitHub Actions and Jenkins, including automated SAST, DAST, dependency scanning, compliance validation, and drift detection.
- Establish continuous ATO baselines aligned with NIST SP 800-53, FedRAMP, and federal directives.
- Design centralized logging and monitoring pipelines routing Cloud Logging data to Pub/Sub, Dataflow, Elastic Cloud, and Splunk.
- Lead integration of user-facing cloud portals with GCP API execution platforms and define orchestration, authentication, error-handling, and state-tracking standards.
- Define federated authentication patterns using SAML 2.0, Entra ID, Keycloak, and OIDC.
- Establish secure enterprise AI architecture for Gemini, Vertex AI, and generative AI pipelines, including private connectivity, encryption, prompt security, DLP, and monitoring.
Requirements
- 8+ years of progressive experience in cloud engineering, IT infrastructure, and DevSecOps, including 4+ years as a Lead GCP Engineer or Cloud Architect.
- Proven experience architecting enterprise GCP environments with Shared VPC, Interconnect or HA VPN routing, Palo Alto NGFW integration, VPC Service Controls, and GKE governance.
- Practical knowledge of FedRAMP Moderate and High, Assured Workloads, DoD Iron Bank container assets, and continuous monitoring.
- Expertise in modular Terraform design, remote state administration, plan/apply automation, dynamic data parsing, and drift resolution is preferred.
- Advanced knowledge of GitHub Actions, self-hosted runner architecture, Jenkins, and Git branching strategies is preferred.
- Operational architectural understanding of AWS GovCloud or Commercial and Microsoft Azure is preferred.
- Google Cloud Professional Cloud Architect certification is highly preferred.
- Google Cloud Professional Cloud Security Engineer certification is preferred.
- Must be a U.S. citizen and possess or be eligible to obtain a Public Trust.
Tech Stack
Categories
About SAIC
SAIC (Science Applications International Corporation) is a government technology integrator delivering systems engineering, enterprise IT, secure cloud, cybersecurity, C5ISR, and data analytics for U.S. defense, space, intelligence, and civilian agencies. It builds and sustains mission IT and digital engineering solutions under multi-year federal contracts and task orders. Founded in 1969, SAIC is headquartered in Reston, Virginia, and is a public company traded on the NYSE under the ticker SAIC.