Senior Cloud​/OSCAL Developer

Position: Senior Cloud / OSCAL Developer
Location: Washington

Peraton Overview Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace.

The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit  to learn how we’re keeping people around the world safe and secure.

Responsibilities Peraton is seeking a Senior Cloud / Open Security Controls Assessment Language (OSCAL) Developer to architect and lead the development of the enterprise security compliance automation infrastructure for a Department of Justice customer. This role develops the cloud-based automation framework enabling continuous, pipeline-driven ATO package production — implementing Dev Sec Ops  best practices to automate the flow of security scan data through OSCAL tooling and into the GRC platform.

Works independently designing new automation components and major enhancements. Responsibilities Architect the enterprise integration layer connecting all five pipeline components:
Heimdall Server, MITRE SAF CLI, Compliance Trestle, OSCAL-CLI, and GRC platform ingestion layer Design and implement automated data flows from all scan sources (Tenable, Splunk, AD/Azure AD, Guardium, Web Inspect, NMAP) to OSCAL artifacts and the GRC platform Implement Dev Sec Ops  best practices: CI/CD pipelines, automated security testing gates, Infrastructure as Code, and OPA-based automated compliance checking Develop and implement cloud applications supporting the pipeline in AWS Gov Cloud (IL5) and AWS Secret Region (IL6);

manage cloud policies, availability design, and security architecture Provide strategies for failure/recovery and cost optimization; establish coding standards, security practices, and API contracts; lead code reviews; mentor junior and mid-level developers.

Coordinate with Senior ISSEs and the DPM to validate pipeline outputs and ensure OSCAL artifacts reflect current system security state #Federal

CyberISaaSQualifications

Required Qualifications Top Secret security clearance upon hire. The selected candidate must be eligible to obtain/maintain a TS/SCI clearance and successfully complete a polygraph examination if required by the customer.  Must be a U.S. Citizen.

Bachelor's Degree in CS, Software Engineering, IT, or related field. Additional years of experience may be considered in lieu of degree.

Minimum 8 years of software development or Dev Sec Ops  engineering in a federal or DoD environment Hands-on experience with OSCAL and at least two of:
Heimdall Server, MITRE SAF CLI, Compliance Trestle, OSCAL-CLI Proficiency in Python, Go, and/or Bash; REST API development; CI/CD tools (Git Lab, Jenkins, or Git Hub Actions) Experience in AWS Gov Cloud IL5, AWS Secret Region (IL6) or Azure Government CompTIA Security+ or equivalent Desired

Qualifications:

OPA/Rego | GRC platform API experienceCISSP or CASP+ISC2 CSSLP (Certified Secure Software Lifecycle Professional) AWS Certified Developer – Professional AWS Certified Dev Ops Engineer – Professional AWS Certified Solutions Architect – Professional Microsoft Certified:
Dev Ops Engineer Expert CKA (Certified Kubernetes Administrator) CKS (Certified Kubernetes Security Specialist) Target Salary Range $135,000 - $216,000. This…