Principal Software Engineer

Clearance Level Must Currently Possess:

Clearance Level Must Be Able to Obtain:

Job Family:

Job Description:

Transform technology into opportunity as a Software Engineer Principal at GDIT. Shape what’s next for mission-critical government projects while shaping what’s next for your engineering career.

MEANINGFUL WORK AND PERSONAL IMPACT
As a Software Engineer Principal, the work you’ll do at GDIT will be impactful to the mission of the Air Force.

• Leading the implementation and management of DevSecOps practices across multiple projects and teams to ensure seamless integration of development, security, and operations processes.
• Designing, implementing, and maintaining highly automated and secure CI/CD pipelines, incorporating advanced security testing and validation techniques.

​WHAT YOU’LL NEED TO SUCCEED
Bring your engineering expertise along with a drive for innovation to GDIT. The Software Engineer Principal must have experience with:

• Providing technical leadership and guidance to cross-functional teams (including developers, security engineers, and operations staff) on secure system design, deployment, and operation. This includes mentoring junior engineers and fostering a culture of security awareness.
• Architecting, implementing, and managing secure and highly available infrastructure, both cloud-based and on-premises, with a focus on automation and scalability. This includes designing infrastructure-as-code solutions and implementing robust monitoring and alerting systems.
• Leading security assessments, penetration testing, and vulnerability remediation efforts, including developing and implementing security policies and procedures. Experience should include conducting threat modeling and risk assessments.
• Developing and maintaining comprehensive documentation for systems, processes, and procedures, and contributing to knowledge sharing and training initiatives. This includes creating architectural diagrams, security documentation, and operational runbooks.
• Experience in conducting Proof of Concepts (POC) to evaluate new DevSecOps tools and technologies and make recommendations for adoption.
• Experience leading incident response and root cause analysis efforts, with a focus on identifying and mitigating security vulnerabilities.
• Experience in developing and delivering DevSecOps training programs.

• →Education: Bachelor of Arts/Bachelor of Science in Computer Science or related field
• →Preferred Master's degree in Computer Science or related field
• →Experience: 10+ years of related experience
• →Must have an active TS SCI clearance
• →Expert-level proficiency in CI/CD tools and pipelines (e.g., Jenkins, GitLab CI, CircleCI, Azure DevOps), including advanced configuration, scripting, and customization.
• →Expertise in configuration management and automation tools (e.g., Ansible, Puppet, Chef, Terraform), including designing and implementing complex infrastructure-as-code solutions.
• →Understanding and extensive experience with containerization and orchestration technologies (e.g., Docker, Kubernetes, Docker Swarm), including designing and managing containerized applications at scale.
• →Sr level knowledge of cloud platforms and services (e.g., AWS, Azure, Google Cloud), including designing and implementing secure and scalable cloud architectures. Experience should include cost optimization and resource management.
• →Mastery of scripting and programming languages (e.g., Python, Bash, Go, Java), with the ability to develop custom tools and automation scripts.
• →In-depth knowledge of security best practices and tools (e.g., OWASP, Nessus, Burp Suite, Splunk, SIEM solutions), including experience with threat intelligence and security monitoring.
• →Understanding of networking concepts and protocols, including TCP/IP, DNS, HTTP, and TLS.
• →Experience with security compliance frameworks and standards (e.g., NIST, CIS, ISO 27001, SOC 2).
• →Experience with static and dynamic code analysis tools.
• →Experience with reverse engineering and malware analysis (preferred).
• →Active participation in the security community (e.g., contributing to open-source projects, presenting at conferences, publishing research

Work Location:

Additional Work Locations:

gdit.com/tc.