Source Code Auditor Jobs (NOW HIRING)

SAIC is looking for a full-time onsite DevOps / DevSecOps Engineer to join our team in Hampton, VA in support of the Air Operations Center Weapons System (AOC WS) Falconer Program's Application Transformation (AppTX) team.

Candidates MUST be willing and able to work 100% onsite in Hampton, VA, Monday - Friday, during normal business hours.

A good candidate is experienced with writing code to automate the infrastructure deployment (Infrastructure-as-Code), installation, configuration (Configuration-as-Code), and operation of virtualized and containerized software applications using tools such as Terraform, Ansible, and PowerShell. A strong candidate is also familiar with writing code to implement DoD cybersecurity requirements and controls; familiar with writing code to interact Amazon Web Services (AWS); and has experience with writing code to configure Windows Server, Linux, containerized applications, and Kubernetes.

Job Responsibilities:

• Builds systems on virtual machine instances through both manual and automated means, in both AWS cloud environments as well as on-premise edge computing environments.
• Applies required cybersecurity controls.
• Configures cloud resources as needed for both application functionality and cybersecurity compliance.
• Supports testing of cloud-hosted virtualized systems.
• Build VM-based systems, install, and configure applications, and support operations and sustainment of those systems in development, test, and production environments.
• Support the cybersecurity monitoring, including the assessment of any identified vulnerabilities and implementation of remediation as required.
• Develop automation code using tools such as Terraform, Ansible, PowerShell, and Python or Bash scripts to partially or fully automate the deployment, installation, and configuration of a large number of server and client applications on Windows and Linux servers, as well as a few containerized applications hosted in Kubernetes clusters.
• Develop, execute, and troubleshoot automated CI/CD pipelines.
• Troubleshoot and resolve issues with virtual machine instances, cloud resource configurations, and automation pipelines.
• Develop and maintain technical documentation as required.
• Collaborate with the AppTX team and other stakeholders, including system administrators, developers, managers, and auditors, to implement AppTX requirements in a timely manner.
• Adhere to source code configuration control processes using Git.
• Develop code to apply required Cybersecurity controls via infrastructure-as-code and configuration-as-code.
• Develop code to configure cloud resources as needed for both application functionality and cybersecurity compliance.

TYPICAL EDUCATION AND EXPERIENCE:

• Bachelor’s and nine (9) years or more experience; Master’s and seven (7) years or more experience. Certifications will be considered in lieu of experience, and additional work experience will be considered in lieu of a degree.
• One-plus (1+) years of demonstrated experience working in software development and/or DevOps/DevSecOps environments.
  Active Secret clearance.
• CompTIA Security+ (or equivalent DoD Approved Baseline Certification for IAT Level II), or willingness to get certified within 30 days of starting.
• Experience with Windows Server operating systems.
• Experience with automation tools including Ansible, and/or PowerShell.
• Experience with Git-based source code management tools such as GitLab, GitHub, and Bitbucket, etc.
• Familiar with infrastructure automation tools including Terraform.
• Familiarity with DoD cybersecurity controls, scans, and remediation of findings.
• Familiarity with Command and Control (C2) application installation, configuration, and maintenance is desirable, but not required.
• Familiarity with Amazon Web Services (AWS), the AWS Console, and AWS CLI.
• Familiarity with Linux operating systems.
• Familiarity with development and automation orchestration tools such as GitLab and GitLab CICD.
• Familiarity with Agile methodologies such as Scrum and/or Kanban.