Raft

Full-stack Engineer

• Maintain and improve the cybersecurity posture of the cloud platform stack across classified and unclassified environments
• Support ATO and continuous ATO requirements and align platform changes with the applicable DoD Reference Design and approved security baseline
• Identify, analyze, prioritize, and remediate vulnerabilities across cloud infrastructure, Kubernetes environments, containers, applications, and supporting technologies
• Integrate security controls and automated security testing into DevSecOps and GitOps workflows
• Support continuous monitoring and integration with applicable DoD Cyber Service Providers
• Develop and maintain security automation using Infrastructure as Code and Configuration as Code, including Terraform, Ansible, Helm, Kubernetes Operators, and similar tooling
• Ensure use of current hardened containers from Iron Bank and update platform components outside the Iron Bank/Big Bang baseline
• Support Zero Trust, identity, access control, PKI, authentication, authorization, ingress/egress, and micro-segmentation capabilities
• Monitor and update access and security policies, attestations, groups, users, devices, certificates, and resource entitlements
• Support integration with DoD PKI and Single Sign-On capabilities
• Support and secure technologies including AppGate, Palo Alto firewalls, HashiCorp Vault and Consul, Keycloak, Zeek, and RKE2/Kubernetes
• Develop and maintain cybersecurity and accreditation documentation supporting the DoD Risk Management Framework
• Partner with DoD teams and stakeholders to improve security processes and accelerate secure enterprise deployments
• Participate in Agile development processes, including backlog refinement, technical planning, implementation, testing, and delivery
• Troubleshoot security and access issues affecting platform users and connected applications and services

Senior Engineer

• Support a DoW program by incorporating Information Assurance, cybersecurity, and security engineering requirements into DevSecOps pipelines, tooling, configurations, and software delivery processes.
• Work with the Pipeline Architect, Software Engineering SMEs, infrastructure/platform engineers, and government stakeholders to meet DoD cybersecurity thresholds.
• Translate DoD cybersecurity, RMF, and DevSecOps requirements into actionable technical requirements.
• Design, implement, configure, and maintain automated security controls within CI/CD pipelines.
• Integrate and maintain SAST, DAST, SCA, container scanning, secrets detection, dependency scanning, and vulnerability management tooling.
• Establish and enforce security gates and thresholds in GitLab CI/CD pipelines.
• Support secure software supply chain practices, including artifact integrity, SBOM generation, vulnerability scanning, signing, provenance, and attestations.
• Integrate security tools such as Fortify, SonarQube, Trivy, Twistlock/Prisma Cloud, NeuVector, and Cosign/Sigstore into automated workflows.
• Review Kubernetes, container, GitLab Runner, infrastructure-as-code, and pipeline configurations for security vulnerabilities and weaknesses.
• Support vulnerability triage and remediation with software and platform engineering teams.
• Develop and maintain security-as-code and policy-as-code approaches.
• Support compliance with the DoD DevSecOps Reference Design, NIST RMF, NIST 800-53 controls, and applicable DoD cybersecurity requirements.
• Automate security evidence collection for authorization and continuous monitoring.
• Partner with platform and application teams on the UP continuous Authority to Operate and CD/CI processes.
• Identify cybersecurity risks and recommend technical mitigations.
• Develop security documentation, implementation guidance, configuration standards, and engineering best practices.
• Participate in architecture reviews, technical discussions, troubleshooting sessions, and security assessments.