Senior Security Engineer

Responsibilities

• Build and improve secure delivery workflows for applications and infrastructure deployed into the federal environment.
• Create policy gates that evaluate infrastructure changes, security requirements, test results, and required approvals before deployment.
• Integrate security scanning and control validation into delivery workflows so issues are identified early in the development process.
• Review infrastructure as code changes that affect the federal boundary and help engineering teams resolve security risks before those changes reach production.
• Design automation that produces change records, approval history, test results, and required evidence directly from engineering workflows.
• Build and maintain hardened system image pipelines that consistently apply approved configurations, security controls, and operating system updates.
• Automate patch deployment across the environment, including testing, scheduling, rollout, validation, exception management, and compliance reporting.
• Improve fleet visibility so teams can quickly identify systems that are missing patches, running unsupported software, or operating outside approved configurations.
• Design and enforce identity and access controls across a complex cloud environment.
• Strengthen cloud security through organization policies, identity controls, resource policies, and automated configuration checks.

Languages