Principal Software Engineer

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Top Secret/SCI

Clearance Level Must Be Able to Obtain:

Top Secret/SCI

Public Trust/Other Required:

None

Job Family:

Software Engineering

Job Qualifications:

Skills:

Agile Methodology, Java (Programming Language), Kubernetes, Python Software Development

Certifications:

None

Experience:

10 + years of related experience

US Citizenship Required:

Yes

Job Description:

Transform technology into opportunity as a Software Engineer Principal at GDIT. Shape what’s next for mission-critical government projects while shaping what’s next for your engineering career.

MEANINGFUL WORK AND PERSONAL IMPACT
As a Software Engineer Principal, the work you’ll do at GDIT will be impactful to the mission of the Air Force.

• Leading the implementation and management of DevSecOps practices across multiple projects and teams to ensure seamless integration of development, security, and operations processes.
• Designing, implementing, and maintaining highly automated and secure CI/CD pipelines, incorporating advanced security testing and validation techniques.

​WHAT YOU’LL NEED TO SUCCEED
Bring your engineering expertise along with a drive for innovation to GDIT. The Software Engineer Principal must have experience with:

• Providing technical leadership and guidance to cross-functional teams (including developers, security engineers, and operations staff) on secure system design, deployment, and operation. This includes mentoring junior engineers and fostering a culture of security awareness.
• Architecting, implementing, and managing secure and highly available infrastructure, both cloud-based and on-premises, with a focus on automation and scalability. This includes designing infrastructure-as-code solutions and implementing robust monitoring and alerting systems.
• Leading security assessments, penetration testing, and vulnerability remediation efforts, including developing and implementing security policies and procedures. Experience should include conducting threat modeling and risk assessments.
• Developing and maintaining comprehensive documentation for systems, processes, and procedures, and contributing to knowledge sharing and training initiatives. This includes creating architectural diagrams, security documentation, and operational runbooks.
• Experience in conducting Proof of Concepts (POC) to evaluate new DevSecOps tools and technologies and make recommendations for adoption.
• Experience leading incident response and root cause analysis efforts, with a focus on identifying and mitigating security vulnerabilities.
• Experience in developing and delivering DevSecOps training programs.

WHAT YOU WILL NEED TO SUCCEED

• Education: Bachelor of Arts/Bachelor of Science in Computer Science or related field
• Preferred Master's degree in Computer Science or related field
• Experience: 10+ years of related experience
• Must have an active TS SCI clearance
• Expert-level proficiency in CI/CD tools and pipelines (e.g., Jenkins, GitLab CI, CircleCI, Azure DevOps), including advanced configuration, scripting, and customization.
• Expertise in configuration management and automation tools (e.g., Ansible, Puppet, Chef, Terraform), including designing and implementing complex infrastructure-as-code solutions.
• Understanding and extensive experience with containerization and orchestration technologies (e.g., Docker, Kubernetes, Docker Swarm), including designing and managing containerized applications at scale.
• Sr level knowledge of cloud platforms and services (e.g., AWS, Azure, Google Cloud), including designing and implementing secure and scalable cloud architectures. Experience should include cost optimization and resource management.
• Mastery of scripting and programming languages (e.g., Python, Bash, Go, Java), with the ability to develop custom tools and automation scripts.
• In-depth knowledge of security best practices and tools (e.g., OWASP, Nessus, Burp Suite, Splunk, SIEM solutions), including experience with threat intelligence and security monitoring.
• Understanding of networking concepts and protocols, including TCP/IP, DNS, HTTP, and TLS.
• Experience with security compliance frameworks and standards (e.g., NIST, CIS, ISO 27001, SOC 2).