Security Compliance Engineer

Section

Details

Job Title

Security Compliance Engineer

Job Type

Full Time

Client Location

Remote

Work Arrangement

Remote

Duration

Full Time

Pay Rate / Salary

$120-$150k/yr.

Job Summary

• We are seeking an experienced STIG Compliance & Security Hardening Engineer to develop and implement automated DISA STIG/SRG security-hardening solutions for operating systems and applications. T
• The role involves developing and maintaining hardened RHEL 8, RHEL 9, and Windows Server 2022 OVA image pipelines, automating security compliance scanning and STIG Checklist (CKL) generation, and validating system configurations against approved security baselines.
• The ideal candidate will identify and document security control exceptions, recommend mitigation strategies and POA&M inputs for client review, and support configuration-drift detection to maintain continuous compliance with federal security standards and requirements.

Key Responsibilities

• Build STIG/SRG hardening automation for OS and application layers.
• Develop and maintain hardened RHEL 8, RHEL 9 and Windows Server 2022 OVA pipelines.
• Automate compliance scanning and CKL generation.
• Document control exceptions, mitigations and recommended POA&M inputs for Client review.

• Support configuration-drift detection against hardened baselines.

Required Qualifications

• DISA STIG and SRG experience.
• SCAP tooling and STIG Viewer.
• Federal RMF / ATO process knowledge.
• Security hardening for RHEL and Windows Server environments.