Security Compliance Engineer

Role Description

Develop DISA-aligned security hardening and compliance automation for DHOC operating systems and application components, producing required compliance evidence.

Roles & Responsibilities

• Build STIG/SRG hardening automation for operating systems and application layers.

• Develop and maintain hardened OVA pipelines for RHEL 8, RHEL 9, and Windows Server 2022.

• Automate compliance scanning and CKL generation.

• Document control exceptions, mitigations, and recommended POA&M inputs for HPE review.

• Support configuration-drift detection against hardened baselines.

Essential Skills

• DISA STIGs and SRGs

• SCAP tooling and STIG Viewer

• Federal RMF/ATO process

• Security hardening for RHEL and Windows Server

• Compliance scanning and automation

• GitHub Enterprise, Linux commands, and automation tools

Key Deliverables

• STIG/SRG contributions to D-01

• Hardened base OVA images

• Security controls automation and CKLs

• Security evidence supporting end-to-end validation

Success Criteria

• CKLs are generated as required, and security findings are documented according to SOW acceptance criteria.

• Hardened images and controls remain traceable to applicable baselines.

Experience Required

5–7 years of relevant experience.