RHEL 10 & DevSecOps Cybersecurity Automation Engineer, Senior
Booz Allen Hamilton16 days ago
Base Salary
$87k - $198k/yr
Responsibilities
- Develop and implement automated security hardening, compliance validation, and continuous monitoring for Red Hat Enterprise Linux 10.
- Translate STIGs, security requirements, and security baselines into reusable, idempotent, testable, and auditable Ansible automation.
- Secure containerized workloads and Docker Swarm managers, workers, hosts, images, registries, services, networking, secrets, and logging.
- Integrate compliance testing, vulnerability scanning, container-image scanning, secrets detection, and infrastructure-as-code scanning into CI/CD pipelines.
- Develop or maintain Python or Bash scripts and Git-based workflows for security automation.
- Automate STIG evidence, compliance reporting, control traceability, tailoring, exceptions, false-positive documentation, and continuous monitoring when applicable.
- Collaborate with cybersecurity, platform engineering, DevSecOps, system administration, and Assessment and Authorization teams.
Requirements
- At least 5 years of experience engineering, administering, or securing Red Hat Enterprise Linux or enterprise Linux environments.
- At least 3 years of experience developing Ansible security automation, including reusable roles, playbooks, inventories, templates, and automated validation.
- Experience with SELinux, firewalld or nftables, auditd, PAM, systemd, SSH, cryptographic policies, file permissions, centralized logging, and Linux security hardening.
- Experience interpreting and implementing STIGs, Security Requirements Guides, CIS Benchmarks, or other security baselines.
- Experience with OpenSCAP, SCAP Compliance Checker, ACAS, Tenable, or Nessus.
- Experience applying container-security requirements and securing Docker Swarm environments.
- Experience developing or maintaining CI/CD pipelines and integrating security capabilities.
- Experience with Python or Bash and Git-based development, testing, review, and maintenance workflows.
- Knowledge of RMF and ATO processes.
- Secret clearance is required; TS/SCI clearance is preferred.
- High school diploma or GED is required.
- Preferred qualifications include RHEL 10 experience, RHEL 8 or RHEL 9 migration experience, Red Hat Ansible Automation Platform, Automation Controller, execution environments, private automation hubs, Molecule, ansible-lint, Testinfra, pytest, compliance reporting, and relevant degrees or certifications such as RHCSA, RHCE, Red Hat Certified Specialist in Ansible Automation, AWS, Azure, CISSP, ISSEP, or SecurityX.
Benefits
- Health, life, disability, financial, and retirement benefits are offered.
- Paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards are available.
- Full-time and part-time employees working at least 20 hours per week on a regular basis are eligible for Booz Allen benefit programs, with employees below that threshold eligible only for select offerings.
- The posting includes a general work-model policy covering remote, hybrid, and onsite assignments, including possible work at Booz Allen or customer facilities.
About Booz Allen Hamilton
Booz Allen Hamilton builds and integrates software, analytics, AI, cloud, and cybersecurity solutions while providing engineering and consulting services, primarily for U.S. defense, intelligence, and civil government clients, with select commercial partnerships. Its business is largely government contracting and professional services delivering mission systems and cyber defense. Founded in 1914 and headquartered in McLean, Virginia, Booz Allen is a public company traded on the NYSE (ticker: BAH).