Security Engineer – Container Image Hardening & Compliance

Security Engineer – Container Image Hardening & Compliance

Location:

Orlando, FL (Worker will Telework Full Time)

Employment Type:

Contingent Non-Employee (Contract / Temporary)

Desired

Start Date:

11/23/2026

Estimated End Date: 8/30/2027

Pay Rate $70.00 - $80.00 Hourly (OT40 Exempt)

Position Summary We are seeking an experienced Security Engineer specializing in container image hardening, cloud compliance, and platform security for an enterprise engagement. The ideal candidate will possess deep technical expertise in securing containerized workloads across AWS and Open Shift/Kubernetes environments, driving automated security controls, and aligning infrastructure with STIG, NIST, and FIPS frameworks.

• Architect, build, and harden container images utilizing Red Hat Iron Bank base images, custom secure configurations, and clean build-from-scratch approaches.
• Implement and manage security controls within an AWS‑foundational context (EC2, IAM, VPC, Cloud Trail, Guard Duty).
• Enforce STIG, NIST, and FIPS compliance frameworks across cloud infrastructure and container life cycles.
• Integrate image‑repository scanning tools (e.g., Harbor, Trivy) into CI/CD pipelines (Git Lab/Git Hub) to detect and remediate vulnerabilities.
• Develop automation scripts and custom security checks using Python, Bash, or Power Shell.
• Support Apache Open Source stack tools (Datahub, Nifi, Airflow, Spark, Trino) and OPA-based security implementations.

• Experience Level: Level 3 (BS + 6–8 years or MS + 4–6 years of professional experience).
• Container Security:
  Minimum of 4 years of hands‑on experience securing containerized workloads in production (Open Shift, Kubernetes) and hardening Linux‑based container images.
• Cloud Security:
  Minimum of 5 years of experience with AWS core security services (EC2, IAM, VPC, Cloud Trail, Guard Duty).
• Scripting & Automation:
  Strong background in Linux/RHEL paired with proficiency in Python, Bash, or Power Shell.
• Compliance Frameworks:
  Proven capability in applying STIG, NIST, and FIPS guidelines.
• Citizenship: US Citizenship is required for this position due to facility‑specific constraints.

• Cloud Security Amazon Web Services (AWS - EC2, IAM, VPC, Guard Duty) Required 5+ Years
• Containerization Kubernetes / Open Shift Required 4+ Years
• Container Hardening Red Hat Iron Bank / Custom Hardened Images Required 4+ Years
• Compliance STIG, NIST, & FIPS Frameworks Required 3+ Years
• Vulnerability Scanning Harbor, Trivy Required 3+ Years
• Scripting Python, Bash, Power Shell Preferred 3+ Years
• CI/CD Pipelines Git Lab / Git Hub CI/CD Preferred 2+ Years
• Big Data / Ops Stack Apache Open Source (Datahub, Nifi, Airflow, Spark, Trino, MinIO)