Cybersecurity Engineer (Expert)

Full-time position, onsite in McLean, VA.

About the role

Pueo is seeking a Senior Cyber Security Engineer to join our unique team of multidisciplined experts onsite in McLean, VA. The ideal candidate shall possess experience in design, and secure air-gapped Kubernetes/OpenShift platforms in classified enclaves. This role combines container platform expertise, federal compliance (NIST 800-53, DISA STIGs, RMF/ATO), CI/CD security automation, and incident response operations and supports architect disconnected container ecosystems, aid implementation of automated security controls, accelerate ATO timelines, and assess platforms supporting mixed sensitivity workloads in SCIFs.

Responsibilities

• Air-Gapped Container Platforms: Design and aid implementation of multi-tenant Kubernetes/OpenShift clusters in disconnected enclaves. Manage registry governance, image signing, SBOM/provenance, vulnerability gating, and offline patching. Implement admission control (OPA Gatekeeper, Kyverno) and RBAC for multi-tenancy in classified environments.
• CI/CD Security Automation: Aid design/securing CI/CD pipelines integrating SAST, DAST, IaC scanning, and automated compliance checks. Generate RMF/ATO evidence via OSCAL mappings and eMASS integration. Enforce promotion gates requiring signed/provenanced artifacts and passing STIG checks.
• Federal Compliance & RMF: Tailor NIST 800-53 controls for containerized systems using shared responsibility matrices. Apply Kubernetes/Docker/OpenShift DISA STIGs and track exceptions. Implement continuous monitoring (CONMON) dashboards via on-prem tools (Prometheus, Falco, auditd). Reduce ATO lead times through automation and evidence generation.
• Zero Trust & Identity: