RHEL 10 & DevSecOps Cybersecurity Automation Engineer, Senior

Booz Allen Hamilton•Fort Belvoir, VA

1d•$86,800 - $198,000•Hybrid

About The Position

The Senior Cybersecurity Automation Engineer will lead the development and implementation of automated security hardening, compliance validation, and continuous monitoring capabilities for Red Hat Enterprise Linux 10 environments. The engineer will maximize automation of applicable Security Technical Implementation Guides (STIGs) and security requirements using approved scripting technologies such as Ansible, Python, or Bash. The position requires hands-on experience securing containerized workloads and Docker Swarm environments, integrating security controls and validation tools into CI/CD pipelines, and operating within Department of Defense or similarly regulated environments. The engineer will collaborate with cybersecurity, platform engineering, DevSecOps, system administration, and Assessment and Authorization teams to translate security requirements into repeatable, testable, and auditable automation. The position is hybrid and based in Fort Belvoir, Virginia. Applicants selected will be subject to a security investigation and must have a Secret clearance. The projected annual compensation range is $86,800 to $198,000. Booz Allen describes benefits that include health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards. Benefit-program eligibility varies by employee work schedule.

Requirements

At least 5 years of experience engineering, administering, or securing Red Hat Enterprise Linux or enterprise Linux environments.
At least 3 years of experience developing security automation using Ansible, including reusable roles, playbooks, inventories, templates, and automated validation.
Experience securing RHEL technologies, including SELinux, firewalld or nftables, auditd, PAM, systemd, SSH, cryptographic policies, file permissions, and centralized logging.
Experience interpreting and implementing STIGs, Security Requirements Guides, CIS Benchmarks, or security baselines, including translating manual requirements into idempotent automation.
Experience using compliance and vulnerability-assessment technologies such as OpenSCAP, SCAP Compliance Checker, ACAS, Tenable, or Nessus.
Experience applying container-security requirements, including container guidance, CIS Docker Benchmarks, or container-hardening standards.
Experience securing Docker Swarm environments, including managers, workers, hosts, images, registries, services, networking, secrets, logging, and vulnerability remediation.
Experience developing or maintaining CI/CD pipelines and integrating security capabilities such as compliance testing, vulnerability scanning, container-image scanning, secrets detection, and infrastructure-as-code scanning.
Experience with an approved scripting language such as Python or Bash, and Git-based workflows for developing, testing, reviewing, and maintaining security automation.
Knowledge of RMF and ATO processes.
Secret clearance.
High school diploma or GED.

Nice To Haves

Experience securing RHEL 10 or migrating security automation and hardened configurations from RHEL 8 or RHEL 9 to RHEL 10.
Experience with Red Hat Ansible Automation Platform, Automation Controller, execution environments, private automation hubs, and testing tools such as Molecule, ansible-lint, Testinfra, or pytest.
Experience automating STIG evidence, compliance reporting, control traceability, tailoring, exceptions, false-positive documentation, and continuous-monitoring activities.
TS/SCI clearance.
Bachelor’s degree in a technical discipline such as cybersecurity, computer science, or engineering.
Red Hat, cloud, or advanced cybersecurity certifications, such as RHCSA, RHCE, Red Hat Certified Specialist in Ansible Automation, AWS or Azure, CISSP, ISSEP, or SecurityX Certification.

Responsibilities

Lead development and implementation of automated security hardening, compliance validation, and continuous monitoring for Red Hat Enterprise Linux 10 environments.
Maximize automation of applicable STIGs and security requirements using approved scripting technologies such as Ansible, Python, or Bash.
Secure containerized workloads and Docker Swarm environments.
Integrate security controls and validation tools into CI/CD pipelines.
Collaborate with cybersecurity, platform engineering, DevSecOps, system administration, and Assessment and Authorization teams to convert security requirements into repeatable, testable, and auditable automation.