Job Description We are seeking a Security Automation Engineer to support a mission-application modernization program that unifies access across a portfolio of production applications: one sign-on, one work surface, and a repeatable pattern for onboarding applications to a shared platform, while the existing applications continue to run and are sustained by the same team, for a Department of War (DoW) customer.
Compliance automation:-Build and operate the pipeline evidence: SBOM generation, vulnerability and container scanning, policy-as-code gates, and OSCAL artifact generation on every merge.-Maintain STIG-based hardening and secrets management across environments. Skills and Requirements -Minimum Interim Secret Clearance-4+ years in security engineering or DevSecOps with hands-on scanning, SBOM, and policy-as-code tooling.-Experience with Syft, Grype, Conftest, Kyverno; compliance-trestle We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.