Senior Platform Engineer/ISSE

Our client seeks a Senior Platform Engineer/ISSE to design, implement, and continuously monitor security controls across containerized and cloud environments. The role will secure Kubernetes platforms, integrate logging and monitoring, and align solutions with NIST RMF and related frameworks in high-impact environments. The engineer will collaborate with platform, security, and operations teams to ensure compliant, resilient, and observable systems.

• Design, implement, and maintain required security controls aligned to NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
• Secure containerized and Kubernetes environments, preferably OpenShift, including cluster hardening and runtime protections.
• Implement continuous monitoring and auditing for control compliance across IL5 to IL6+ environments.
• Configure and optimize log collection and analytics in tools such as Splunk to detect anomalies and risks.
• Execute routine security checks on a daily, weekly, and monthly cadence in alignment with NIST RMF.
• Support incident response, security incident handling, and forensic analysis.
• Integrate and operate security tools including Fortify, Acunetix, and Prisma Cloud.
• Partner with platform engineering to embed DevSecOps practices and automate security control enforcement.
• Communicate technical risks and mitigations to technical and non-technical stakeholders.

• 7+ years as a cybersecurity engineer with proven security control design, build, and continuous monitoring.
• Hands-on Kubernetes security experience; OpenShift preferred.
• Strong skills in log collection, Splunk querying, and security analytics.
• Demonstrated experience with NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
• Experience implementing controls for cloud, container, and DevSecOps solutions in IL5 to IL6+ environments.
• Understanding of network protocols, operating systems, and core infrastructure.
• Experience conducting periodic security checks aligned to RMF.
• Proficiency in incident response and forensic techniques.
• Experience with Fortify, Acunetix, and Prisma Cloud.
• CISSP or equivalent meeting DoD 8140 requirements.
• Active TS/SCI; CI poly preferred or willingness to obtain.
• Nice to have: service mesh security knowledge (e.g., Greymatter), AWS or Kubernetes-related cloud certifications, and advanced container security tooling expertise.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• CISSP or equivalent meeting DoD 8140 requirements.
• Active TS/SCI; CI poly preferred or willingness to obtain.