Senior Compliance Automation Engineer
True Anomaly3 months ago
Washington, DC, USA +2 moreSenior
Base Salary
$135k - $195k/yr
Responsibilities
- Architect and build a greenfield continuous compliance monitoring platform that aggregates, correlates, and reports security control status across hybrid environments.
- Design an API-first architecture with extensible data models, internal APIs, webhook-driven integrations, and secure collection agents for on-premises and air-gapped systems.
- Develop control-validation microservices that test NIST controls, generate machine-readable evidence, identify gaps, and provide remediation guidance.
- Create automated evidence collection, artifact indexing, SSP maintenance, POA&M lifecycle, CMMC readiness, authorization, and audit-support workflows.
- Integrate compliance enforcement into GitHub Actions, GitLab CI, and Jenkins pipelines using policy-as-code and infrastructure-as-code controls.
- Build STIG validation, secure baseline enforcement, drift detection, and remediation automation across Linux, Windows, containers, and cloud resources.
- Design hybrid synchronization and data pipelines that respect network segmentation, classification boundaries, CUI, ITAR, and classified-data handling requirements.
- Implement in-house dashboards, compliance scoring, trend analysis, alerting, escalation, and structured audit logging.
- Partner with DevOps and platform engineering teams to maintain secure authorization boundaries as infrastructure evolves.
Requirements
- At least 7 years of experience in security engineering, compliance engineering, DevSecOps, or a closely related discipline, emphasizing automation development.
- Ability to design and build production-quality APIs, data pipelines, and integration services using Python, Go, TypeScript/Node.js, or equivalent.
- Deep hands-on knowledge of NIST SP 800-53 Rev. 5 and NIST SP 800-171 Rev. 2/Rev. 3 and the ability to convert controls into automated implementations.
- Experience building webhook-driven and API-based integrations across cloud services, SIEMs, vulnerability management platforms, and ITSM systems.
- Hands-on experience with policy-as-code frameworks such as Open Policy Agent, Terraform Sentinel, AWS Config, or Azure Policy.
- Proficiency with infrastructure-as-code tools such as Terraform, Ansible, or Pulumi and experience enforcing controls through templates and pipelines.
- Experience with GitHub Actions, GitLab CI, or Jenkins and building compliance gates into CI/CD pipelines.
- Working experience with STIG validation tools such as InSpec, OpenSCAP, or SCC, including custom profile development.
- Familiarity with AWS GovCloud or Azure Government security services, including AWS Security Hub, AWS Config, Azure Security Center, and Microsoft Defender for Cloud.
- Experience with hybrid cloud and on-premises architectures, network segmentation, data classification boundaries, and compliance scope delineation.
- Active or obtainable SECRET security clearance; TS/SCI is strongly preferred.
- Must meet the stated ITAR eligibility requirements as a U.S. citizen, lawful permanent resident, protected individual, or eligible authorization recipient.
- Preferred qualifications include CMMC Level 2 or Level 3, DoD IL5/IL6 RMF authorization and ATO sustainment, SIEM and log management, container and Kubernetes security, vulnerability management, database design, event streaming, relevant certifications, and defense or aerospace experience.
Benefits
- Equity and health, dental, vision, HRA/HSA options, PTO, paid holidays, 401(k), and parental leave.
- Hybrid work environment with a minimum of 3 days per week onsite.
- Candidates must be located near Denver, Long Beach, the San Francisco Bay Area, or Washington, D.C.
- The role requires the ability to obtain and maintain a security clearance and includes work in an office or production factory environment.
Tech Stack
AnsibleApache KafkaGitHub ActionsGitLab CI/CDGoJenkinsKubernetesLinuxNode.jsPythonRabbitMQTerraformTypeScriptWindows
About True Anomaly
True Anomaly is the only defense technology company focused exclusively on space defense. Founded in 2022 by ex-U.S. Space Force members, True Anomaly designs and builds advanced systems for space superiority: agile and powerful spacecraft platforms, mission software engineered for unmatched command and control, and payloads tailored for precision sensing and effects. We are headquartered in Centennial, Colorado, with regional offices in Colorado Springs, Colorado, Long Beach, California, and Washington, D.C. We are hiring and seeking exceptional talent to join True Anomaly, from any technical industry or background, to bring unique talents, perspective, and solutions. If you embrace complexity, demonstrate relentless ownership, have the resiliency and persistence to overcome challenges. If you’re like us and want your work to carry purpose and shape the future of space, visit www.WhyAreYouHere.com.