SAIC
Posted 79 days agoVerified live 1d ago
DevSecOps Engineer
Brief overview
Remote
UndergradOr in progress
$80k–$120k/yrStated range
6+ yrsMinimum
Clearance requiredU.S. government
Active DirectoryWindows Server administrationNIST security frameworkISO security frameworkKeycloakSAML integrationSingle Sign On (SSO)Role-Based Access Control (RBAC)GitLab CI/CDGit workflowsImpact Level 6 (IL6) complianceDoD compliance frameworksAnchoreSonarQubeCosignContainer hardeningVulnerability remediation
About the company
SAICsaic.com
SAIC specializes in IT, enterprise IT, engineering, and professional services.
Job description
Summary
SAIC is seeking a skilled and motivated Mid-Level Infrastructure Engineer with a strong background in Windows environments. The DevSecOps Engineer will focus on modernizing and managing Windows Server infrastructure while collaborating with cross-functional teams to deploy secure and scalable infrastructure, applications, and pipelines.
Responsibilities
- Deploy, configure, maintain, and troubleshoot Active Directory (AD) and Domain Controller (DC) environments in a hybrid or on-premise Windows environment
- Maintain the integrity and security of AD forests, domains, and trusted environments
- Harden Active Directory and Domain Controller configurations following DoD STIG compliance and industry best practices
- Manage Group Policy Objects (GPOs) and enforce security policies using tailored configurations
- Ensure monitoring, logging, and auditing capabilities are in place to track AD/Domain Controller performance and security
- Ensure security best practices, including Role-Based Access Control (RBAC), namespace isolation, and secure ingress/egress traffic configurations
- Create AWS AMI for Windows Servers using Packer, Ansible, and powershell
- Work within a secure, air-gapped IL5 environment and implement robust processes to ensure compliance with DoD or other regulatory frameworks
- Implement and ensure the security and availability of Windows and Linux systems, including patch management, vulnerability assessments, and compliance with organizational policies
- Automate recurring tasks using scripting tools like PowerShell, Ansible, Python, Bash or Powershell to improve operational efficiency
- Troubleshoot issues within Windows (file systems, network connectivity, performance, and authentication)
- Plan and execute upgrades, migrations, and installations for both Windows and Linux systems
- Collaborate with cross-functional teams to ensure systems integration and operational effectiveness
- Develop and deliver technical documentation, including CI/CD pipeline configurations, workflow processes, and build instructions
Skills
- Technical Education/Clearance
- Must have BS Degree with (6) six years of experience
- Security+ Certification
- Must have an active Secret Clearance
- Strong knowledge of Active Directory architecture, including replication, forests, and domains
- Proficiency with Windows Server administration, roles, and features
- Comprehensive Understanding with security frameworks, such as NIST or ISO, and their application in AD/DC environments
- Experience in integrating authentication/SSO identity solutions including but not limited to Keycloak, Active Directory, SAML integration with SSO in tools, RBAC best practices within AD
- Proficiency with GitLab CI/CD and Git-based workflows to version control and orchestrate pipelines
- Knowledge and experience working in secure environments, specifically Impact Level 6 (IL6) or similarly controlled environments, with a strong understanding of DoD or equivalent compliance frameworks
- Proficiency in tools for security automation: Image Scanning Tools (e.g., Anchore), Static Code Analysis Tools (e.g., SonarQube), Software Signing Tools (e.g., Cosign) for image and binary integrity verification
- Hands-on experience with container hardening and vulnerability remediation
- Strong scripting and automation skills for automating configuration, build, and deployment processes
- Proficiency with Infrastructure as Code (IaC) tools like Terraform, Helm, or Ansible for provisioning and managing secure environments
- Ability to effectively communicate complex technical concepts to developers, security teams, and stakeholders
- Proven experience collaborating in multidisciplinary teams within Agile or DevSecOps methodologies
Qualifications
Must Haves
- Technical Education/Clearance
- Must have BS Degree with (6) six years of experience
- Security+ Certification
- Must have an active Secret Clearance
- Strong knowledge of Active Directory architecture, including replication, forests, and domains
- Proficiency with Windows Server administration, roles, and features
- Comprehensive Understanding with security frameworks, such as NIST or ISO, and their application in AD/DC environments
- Experience in integrating authentication/SSO identity solutions including but not limited to Keycloak, Active Directory, SAML integration with SSO in tools, RBAC best practices within AD
- Proficiency with GitLab CI/CD and Git-based workflows to version control and orchestrate pipelines
- Knowledge and experience working in secure environments, specifically Impact Level 6 (IL6) or similarly controlled environments, with a strong understanding of DoD or equivalent compliance frameworks
- Proficiency in tools for security automation: Image Scanning Tools (e.g., Anchore), Static Code Analysis Tools (e.g., SonarQube), Software Signing Tools (e.g., Cosign) for image and binary integrity verification
- Hands-on experience with container hardening and vulnerability remediation
- Strong scripting and automation skills for automating configuration, build, and deployment processes
- Proficiency with Infrastructure as Code (IaC) tools like Terraform, Helm, or Ansible for provisioning and managing secure environments
- Ability to effectively communicate complex technical concepts to developers, security teams, and stakeholders
- Proven experience collaborating in multidisciplinary teams within Agile or DevSecOps methodologies
