Job Title: Security Compliance Engineer
Location: Remote
Duration: 6 months (Extendable)
Pay Range: $48-50/Hour on W2/C2C (All Inclusive)
Request ID: 114431-1
Position Summary:
This request is for a role with a Government agency, which mandates that candidates must be US citizens
Builds STIG / SRG hardening automation, Hardened OVA pipelines, Compliance scanning, CKL / ATO evidence.
Experience with DISA STIGs and SRGs, SCAP tooling, STIG Viewer, and the federal RMF / ATO process.
Role Descriptions: Engineer DISA-aligned hardening and compliance automation for DHOC operating systems and application components and produce required compliance evidence.Key ResponsibilitiesBuild STIG/SRG hardening automation for OS and application layers.Develop and maintain hardened RHEL 8| RHEL 9 and Windows Server 2022 OVA pipelines.Automate compliance scanning and CKL generation.Document control exceptions| mitigations and recommended POA&M inputs for HPE review.Support configuration-drift detection against hardened baselines.Required Skills / Experience5-7 years of relevant experience.DISA STIG and SRG experience.SCAP tooling and STIG Viewer.Federal RMF / ATO process knowledge.Security hardening for RHEL and Windows Server environments.Primary Deliverable ContributionSTIG/SRG portions of D-01.Hardened Base OVA Images.Security Controls Automation and CKLs.Security evidence supporting end-to-end validation.Success / Acceptance FocusCKLs are generated as required; security findings are documented in accordance with SOW acceptance criteria.Hardened images and controls remain traceable to the applicable baseline.All personnel under this SOW must satisfy the stated U.S.-citizenship requirement.
Essential Skills: Engineer DISA-aligned hardening and compliance automation for DHOC operating systems and application components and produce required compliance evidence.Key ResponsibilitiesBuild STIG/SRG hardening automation for OS and application layers.Develop and maintain hardened RHEL 8| RHEL 9 and Windows Server 2022 OVA pipelines.Automate compliance scanning and CKL generation.Document control exceptions| mitigations and recommended POA&M inputs for HPE review.Support configuration-drift detection against hardened baselines.Required Skills / Experience5-7 years of relevant experience.DISA STIG and SRG experience.SCAP tooling and STIG Viewer.Federal RMF / ATO process knowledge.Security hardening for RHEL and Windows Server environments.Primary Deliverable ContributionSTIG/SRG portions of D-01.Hardened Base OVA Images.Security Controls Automation and CKLs.Security evidence supporting end-to-end validation.Success / Acceptance FocusCKLs are generated as required; security findings are documented in accordance with SOW acceptance criteria.Hardened images and controls remain traceable to the applicable baseline.All personnel under this SOW must satisfy the stated U.S.-citizenship requirement.
Desirable Skills:
Keyword:
Skills: AI and Automation~Github Enterprise~Unix / Linux Basics and Commands~EIS : Network Engineer
Experience Required: 6-8