3 days ago
Base Salary
$135k - $216k/yr
Responsibilities
- Architect the enterprise integration layer connecting Heimdall Server, MITRE SAF CLI, Compliance Trestle, OSCAL-CLI, and the GRC platform ingestion layer.
- Design and implement automated flows from Tenable, Splunk, AD/Azure AD, Guardium, WebInspect, and NMAP into OSCAL artifacts and the GRC platform.
- Implement CI/CD pipelines, automated security testing gates, Infrastructure as Code, and OPA-based compliance checking.
- Develop cloud applications and manage policies, availability design, and security architecture in AWS GovCloud IL5 and AWS Secret Region IL6.
- Develop failure and recovery strategies, optimize costs, establish coding and security standards and API contracts, lead code reviews, and mentor junior and mid-level developers.
- Coordinate with Senior ISSEs and the DPM to validate pipeline outputs and current system security state.
Requirements
- Top Secret clearance upon hire, eligibility to obtain and maintain TS/SCI clearance, possible polygraph completion, and U.S. citizenship.
- Bachelor's degree in computer science, software engineering, information technology, or a related field; additional experience may substitute for the degree.
- At least 8 years of software development or DevSecOps engineering experience in a federal or Department of Defense environment.
- Hands-on OSCAL experience and experience with at least two of Heimdall Server, MITRE SAF CLI, Compliance Trestle, and OSCAL-CLI.
- Proficiency in Python, Go, and/or Bash; REST API development; and CI/CD tools such as GitLab, Jenkins, or GitHub Actions.
- Experience with AWS GovCloud IL5, AWS Secret Region IL6, or Azure Government.
- CompTIA Security+ or equivalent certification.
- Preferred qualifications include OPA/Rego and GRC platform API experience; CISSP, CASP+, ISC2 CSSLP, AWS, Microsoft DevOps, CKA, or CKS certifications.
Benefits
- Medical, dental, vision, life insurance, health savings account, short- and long-term disability, employee assistance program, parental leave, 401(k), paid time off, and company-paid holidays.
- The application period is estimated at 30 days from the posting date but may change based on business needs and candidate availability.
About Peraton
Peraton builds and integrates mission systems, cyber, space, and intelligence solutions for U.S. defense, intelligence, and civil agencies. It delivers enterprise IT, satellite and terrestrial communications, and spectrum management under government contracts. Founded in 2017, the company is headquartered in Reston, Virginia and is privately held by Veritas Capital.