Security Engineer – Container Image Hardening & Compliance

Security Engineer – Container Image Hardening & Compliance

• Location: Orlando, FL (Worker will Telework Full Time)

• Employment Type: Contingent Non-Employee (Contract / Temporary)

• Desired Start Date: 11/23/2026

• Estimated End Date: 8/30/2027

• Pay Rate $70.00 - $80.00 Hourly (OT40 Exempt)

Position Summary

We are seeking an experienced Security Engineer specializing in container image hardening, cloud compliance, and platform security for an enterprise engagement. The ideal candidate will possess deep technical expertise in securing containerized workloads across AWS and OpenShift/Kubernetes environments, driving automated security controls, and aligning infrastructure with STIG, NIST, and FIPS frameworks.

Essential Duties & Responsibilities

• Architect, build, and harden container images utilizing Red Hat Iron Bank base images, custom secure configurations, and clean build-from-scratch approaches.

• Implement and manage security controls within an AWS-foundational context (EC2, IAM, VPC, CloudTrail, GuardDuty).

• Enforce STIG, NIST, and FIPS compliance frameworks across cloud infrastructure and container lifecycles.

• Integrate image-repository scanning tools (e.g., Harbor, Trivy) into CI/CD pipelines (GitLab/GitHub) to detect and remediate vulnerabilities.

• Develop automation scripts and custom security checks using Python, Bash, or PowerShell.

• Support Apache OpenSource stack tools (Datahub, Nifi, Airflow, Spark, Trino) and OPA-based security implementations.

Qualifications & Requirements

• Experience Level: Level 3 (BS + 6–8 years or MS + 4–6 years of professional experience).

• Container Security: Minimum of 4 years of hands-on experience securing containerized workloads in production (OpenShift, Kubernetes) and hardening Linux-based container images.

• Cloud Security: Minimum of 5 years of experience with AWS core security services (EC2, IAM, VPC, CloudTrail, GuardDuty).

• Scripting & Automation: Strong background in Linux/RHEL paired with proficiency in Python, Bash, or PowerShell.

• Compliance Frameworks: Proven capability in applying STIG, NIST, and FIPS guidelines.

• Citizenship:US Citizenship is required for this position due to facility-specific constraints.

Skills Matrix