{"id":2581998,"url":"https://alion.io/job/saic-devsecops-engineer-2","title":"DevSecOps Engineer","company":{"id":58788,"name":"SAIC","domain":"saic.com","url":"https://alion.io/company/saic","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":81,"open_postings":55,"ghost_share":0,"stale_share":0.964,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":233000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1245},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EC2","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Confluence","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"JFrog Artifactory","optional":false},{"name":"Jira","optional":false},{"name":"Keycloak","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SonarQube","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-13T15:19:02Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-15T02:15:53Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Position Title: Senior Cloud DevSecOps Engineer\nTarget Environment: Multi-Cloud (AWS Commercial/GovCloud, GCP, Azure) & Unified Cloud Portal\nPosition Overview\nThe Senior Cloud DevSecOps & Terraform Engineer will serve as a key technical contributor supporting a multi-cloud initiative. This role focuses on developing, maintaining, and automating multi-cloud infrastructure through Infrastructure as Code (IaC/Terraform), building CI/CD pipelines, and integrating backend automation with the Unified Cloud Portal and Service Catalog. The ideal candidate will combine deep expertise in cloud automation, containerization (including DoD Iron Bank hardened images), and continuous compliance scanning to ensure seamless and secure cloud provisioning across cloud enclaves.\nKey Responsibilities\n Infrastructure as Code (IaC) & Cloud Automation (Terraform) Design, develop, test, and maintain modular, reusable Terraform modules for AWS (GovCloud/Commercial) and GCP landing zones and core services (e.g., S3, EC2, IAM, RDS).\nEstablish automated Terraform deployment structures, parameterizing configurations via YAML/JSON for dynamic execution.\nBuild and manage generic, configurable IAM policies, roles, and cross-account access for multi-tenant cloud environments.\n\n Unified Portal (T-Portal) & Service Catalog Integration Partner with front-end developers to connect React/web applications to backend API execution workflows for service catalog requests.\nAutomate end-to-end execution flows for portal user requests (e.g., resource provisioning, plan/apply/destroy pipelines, and user request history tracking).\nImplement portal authentication mechanisms (SAML, Entra ID / Keycloak, OIDC/SSO) and fine-grained Role-Based Access Controls (RBAC).\n\n DevSecOps, CI/CD, & Continuous Compliance Build, maintain, and standardize GitHub Actions and Jenkins CI/CD workflows and automated pipelines for deployment and vulnerability scanning.\nIntegrate automated security gates, container vulnerability scans, and code quality checks directly into deployment pipelines.\nConfigure event notification handlers and API integrations (e.g., Jira, Confluence, SMTP) to track security findings and deployment status.\n\n Containerization, Artifact Management, & Code Quality Infrastructure Standardize containerized development environments using VS Code Dev Containers, Docker, and Department of Defense (DoD) Iron Bank hardened container images.\nManage and administer binary artifact repositories via JFrog Artifactory to secure software supply chains.\nPerform SonarQube administration and infrastructure management, configuring quality gates, server health, plugin management, and enterprise-wide static code analysis (SAST) standards.\n\n Required Qualifications & Experience\nExperience: 7+ years of progressive experience in software development, cloud engineering, and DevSecOps practices.\nTerraform & IaC: Mastery of Terraform module design, state management, dry runs, and cross-account automation strategies.\n Multi-Cloud Platforms: Hands-on experience with AWS (GovCloud & Commercial) and Google Cloud Platform (GCP) or Microsoft Azure.\nCI/CD & Source Control: Advanced experience with GitHub Actions, GitHub Workflows, self-hosted GitHub runners, Jenkins, and Git repository strategies.\nContainerization & Hardening: Strong knowledge of Docker, Dev Containers, Iron Bank container images, and container registries (ECR/Artifactory).\nSecurity & Compliance: In-depth understanding of cloud IAM role creation, policy mapping, continuous compliance/CATO standards, and vulnerability scanning tools.\nAPI & Scripting: Proficiency with Linux/Bash, Python, REST APIs, JSON/YAML parsing, and backend integration workflows.\nPreferred / Good-to-Have Skills\nJenkins: Experience building and maintaining CI/CD pipelines and automation servers using Jenkins.\nArtifactory Management: Advanced experience managing artifact repositories, proxying dependencies, and securing binary lifecycles.\nSonarQube Administration: Proven capability in administering SonarQube infrastructure, managing server configurations, optimizing database performance, and maintaining code quality gates across development teams.\nIron Bank Integration: Direct experience pulling, validating, and deploying Iron Bank containerized assets within federal or secure enclaves.AWS Certified Solutions Architect / DevOps Engineer - Professional\nGoogle Cloud Certified Associate Cloud Engineer / Professional Cloud Architect\n\nPreferred Certifications & Clearances\nSecurity Clearance: Must be eligible to obtain or possess an active Public Trust (U.S. Citizenship or Green Card required)","description_format":"text","description_chars":4625,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Digital Government","Systems Integrators","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-15T02:14:33Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":12,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-10-15T05:11:54Z"},"pay":null,"html_url":"https://alion.io/job/saic-devsecops-engineer-2","json_url":"https://alion.io/job/saic-devsecops-engineer-2.json","meta":{"generated_at":"2026-10-15T05:11:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7609,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58788},"rest":"https://alion.io/mcp/rest/get_company?id=58788"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsaic-devsecops-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsaic-devsecops-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsaic-devsecops-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/saic-devsecops-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsaic-devsecops-engineer-2"}]}