Security Compliance Engineer

Job Title: Security Compliance Engineer

Location: Fort Collins, CO
Experience: 6 8 Years

We are seeking an experienced Security Compliance Engineer with expertise in DISA STIG/SRG compliance, SCAP tools, federal RMF/ATO processes, and operating system security hardening. The ideal candidate will develop automated security compliance solutions and maintain hardened RHEL and Windows Server images to meet federal security standards.

• DISA STIG and Security Requirements Guide (SRG) compliance.
• SCAP tooling and STIG Viewer.
• Federal Risk Management Framework (RMF) and Authorization to Operate (ATO) processes.
• Security hardening for RHEL 8, RHEL 9, and Windows Server 2022.
• Security compliance automation and configuration-baseline management.

• Develop STIG/SRG hardening automation for operating systems and application layers.
• Build, maintain, and validate hardened RHEL 8, RHEL 9, and Windows Server 2022 OVA image pipelines.
• Automate compliance scanning, assessment, and CKL (checklist) generation.
• Document security control exceptions, mitigations, and recommended POA&M (Plan of Action and Milestones) inputs for HPE review.
• Implement configuration-drift detection against approved security baselines.
• Support security remediation, compliance assessments, and technical documentation.
• Collaborate with engineering and security teams to maintain secure, compliant system configurations.