RHEL 10 & DevSecOps Cybersecurity Automation Engineer, Senior

Booz Allen Hamilton • Fort Belvoir, VA

2d • $86,800 - $198,000

About The Position

The Senior Cybersecurity Automation Engineer will lead the development and implementation of automated security hardening, compliance validation, and continuous monitoring for Red Hat Enterprise Linux 10 environments. The role maximizes automation of applicable Security Technical Implementation Guides (STIGs) and security requirements using approved scripting technologies such as Ansible, Python, or Bash.

The position involves securing containerized workloads and Docker Swarm environments, integrating security controls and validation tools into CI/CD pipelines, and working in Department of Defense or similarly regulated environments. The engineer collaborates with cybersecurity, platform engineering, DevSecOps, system administration, and Assessment and Authorization teams to turn security requirements into repeatable, testable, and auditable automation.

Requirements

• At least 5 years of experience engineering, administering, or securing Red Hat Enterprise Linux or enterprise Linux environments.
• At least 3 years of experience developing security automation using Ansible, including reusable roles, playbooks, inventories, templates, and automated validation.
• Experience securing RHEL technologies including SELinux, firewalld or nftables, auditd, PAM, systemd, SSH, cryptographic policies, file permissions, and centralized logging.
• Experience interpreting and implementing STIGs, Security Requirements Guides, CIS Benchmarks, or security baselines, including translating manual requirements into idempotent automation.
• Experience with compliance and vulnerability-assessment technologies such as OpenSCAP, SCAP Compliance Checker, ACAS, Tenable, or Nessus.
• Experience applying container-security requirements, such as container guidance, CIS Docker Benchmarks, or container-hardening standards.
• Experience securing Docker Swarm environments, including managers, workers, hosts, images, registries, services, networking, secrets, logging, and vulnerability remediation.
• Experience developing or maintaining CI/CD pipelines and integrating security capabilities such as compliance testing, vulnerability scanning, container-image scanning, secrets detection, and infrastructure-as-code scanning.
• Experience with an approved scripting language such as Python or Bash, and Git-based workflows to develop, test, review, and maintain security automation.
• Knowledge of RMF and ATO processes.
• Secret clearance required; selected applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.
• High school diploma or GED.

Nice To Haves

• Experience securing RHEL 10 or migrating security automation and hardened configurations from RHEL 8 or RHEL 9 to RHEL 10.
• Experience with Red Hat Ansible Automation Platform, Automation Controller, execution environments, private automation hubs, and testing tools such as Molecule, ansible-lint, Testinfra, or pytest.
• Experience automating STIG evidence, compliance reporting, control traceability, tailoring, exceptions, false-positive documentation, and continuous-monitoring activities.
• TS/SCI clearance.
• Bachelor’s degree in a technical discipline such as cybersecurity, computer science, or engineering.
• Red Hat, cloud, or advanced cybersecurity certifications, such as RHCSA, RHCE, Red Hat Certified Specialist in Ansible Automation, AWS or Azure, CISSP, ISSEP, or SecurityX Certification.

Responsibilities

• Lead development and implementation of automated security hardening, compliance validation, and continuous monitoring for RHEL 10 environments.
• Automate applicable STIGs and security requirements using approved technologies such as Ansible, Python, or Bash.
• Secure containerized workloads and Docker Swarm environments.
• Integrate security controls and validation tools into CI/CD pipelines.
• Collaborate with cybersecurity, platform engineering, DevSecOps, system administration, and Assessment and Authorization teams to create repeatable, testable, and auditable automation.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards program for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED