Development Security Operations (DevSecOps) Engineer

Job Description
BAE Systems is seeking a mission-oriented DevSecOps Engineer to join our dynamic team of IT professionals supporting the Hydra Program. As a member of an Agile team, you will focus on the security and operations of cloud-based software applications responsible for disseminating finished intelligence reports to various customers. Your work will ensure that information is in the hands of government decision-makers, informing strategic operations. This role emphasizes software operations, security, and compliance with government regulations.

As a DevSecOps Engineer, you will:

• CI/CD Pipeline: Use enterprise, government-managed Continuous Integration / Continuous Deployment (CI/CD) pipeline for build, test, and deployment environments.
• Documentation: Create and maintain high-level system architecture diagrams and system requirements documents.
• Vulnerability Management: Conduct ongoing vulnerability testing to verify security features and operating controls. Implement corrective measures to prevent future security incidents.
• Compliance and Accreditation: Support the maintenance of active security authorizations for all projects/security plans (SPIDs). Ensure compliance with Assessment and Authorization (A&A) milestone requirements.
• Collaboration and Support: Work with program managers, system security engineers, and government security officials. Provide Tier 1 and Tier 2 support during non-business hours as required.

Additional Responsibilities include:

• Cloud-Based Software Operations and Security: Manage and secure cloud-based software applications, focusing on AWS cloud environments. Implement security measures in accordance with ICDs, NISP, NIST, and other guiding government regulations.
• System Security Plans: Prepare, maintain, and implement System Security Plans that accurately depict contractual requirements.
• Security Tools: Use security-relevant databases such as XACTA 360, Service , Continuity Planning Tool (CPT), and Software Approval Process (SWAP).

Required Education, Experience, & Skills
Education:

• Minimum of Bachelor’s Degree in Computer Science, Information Systems, Engineering, or a related technical or scientific discipline.

Certifications:

• Current Security certification.

Experience:

• Minimum of six (6) years of system administration or engineering experience with expertise in Linux and AWS cloud environments.
• Demonstrated experience in a DevOps / DevSecOps environment
• Demonstrated experience working in a Agile / Scaled Agile construct.
• 5 years of related experience in systems engineering and administration.
• 3 years of experience generating Risk Management Framework (RMF) packages and supporting ICD 503 compliance.
• 3 years of experience with applying DISA Security Technical Implementation Guide (STIGs) and Security Recommendation Guides (SRG).

Skills:

• In-depth experience with Government procedures and policies, including Operations Security requirements.
• Strong understanding of technical principles, theories, and concepts.
• Ability to work under general direction and provide technical solutions to difficult problems.

Preferred Education, Experience, & Skills
Education:

• Advanced degrees in Computer Science, Information Systems, Engineering, or a related technical or scientific discipline.

Certifications:

• Working towards CISSP certification.

Experience:

• Additional experience in cloud security, specifically with AWS services.
• Experience with other cloud environments (e.g., Azure, Google Cloud).
• Familiarity with containerization technologies (e.g., Docker, Kubernetes).
• Experience with automation tools (e.g., Ansible, Terraform).

Skills:

• Advanced knowledge of security frameworks and compliance regulations.
• Experience with threat modeling and risk management.
• Strong communication and collaboration skills.

Pay Information
Full-Time Salary Range: $107359 - $182510

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20 hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.


About BAE Systems Intelligence & Security
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it’s what we do at BAE Systems. Working here means using your passion and ingenuity where it counts – defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team—making a big impact on a global scale. At BAE Systems, you’ll find a rewarding career that truly makes a difference.

Intelligence & Security (I&S), based in McLean, Virginia, designs and delivers advanced defense, intelligence, and security solutions that support the important missions of our customers. Our pride and dedication shows in everything we do—from intelligence analysis, cyber operations and IT expertise to systems development, systems integration, and operations and maintenance services. Knowing that our work enables the U.S. military and government to recognize, manage and defeat threats inspires us to push ourselves and our technologies to new levels.

This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.

Salary : $107,359 - $182,510