TS SCI w/ CI Poly Cleared Infrastructure Security Engineer (STIG Hardening)

About the role

Our client, a leader in the HCM space, is seeking an Infrastructure Security Engineer for a long‑term contract with a strong likelihood of extension. The role is hybrid, based out of Reston, VA, and involves building and maintaining hardened cloud infrastructure that meets federal security requirements.

Responsibilities

• Build and maintain hardened cloud infrastructure that meets federal security requirements.
• Work closely with cloud engineering and security teams to automate secure image creation.
• Implement security controls and support compliance initiatives across AWS environments.

Requirements

• 3+ years of experience in Infrastructure Engineering, Cloud Engineering, DevSecOps, or Infrastructure Security with a focus on STIG hardening.
• Strong Linux administration experience (RHEL, CentOS, Amazon Linux).
• Experience with infrastructure automation tools such as Ansible, Terraform, or Packer.
• Experience supporting AWS cloud environments.
• Experience implementing security controls, STIGs, CIS Benchmarks, or other compliance frameworks.
• Experience with CI/CD pipelines and infrastructure automation.
• Active TS/SCI with CI Poly clearance.

Qualifications

• Experience with Jenkins, Python, Docker, or Kubernetes.
• Experience supporting federal, DoD, or Intelligence Community environments.
• Familiarity with FedRAMP, RMF, NIST 800‑53, or Zero Trust frameworks.
• Experience with AWS KMS, Secrets Manager, or HashiCorp Vault.
• Security certifications such as CISSP, Security+, AWS Security Specialty, or similar.

Pay

The expected hourly rate range for this role is: $67.5-97.5 per hour. The posted range is an estimate, the actual compensation offer will be based on the candidate’s experience, skills, qualifications and will be in line with internal equity.

Schedule

Hybrid schedule based out of Reston, VA.