Vulnerability Engineer

• Design, deploy, and maintain secure, scalable, and resilient Azure cloud infrastructure
• Operate and administer AKS Kubernetes clusters, including node pools, networking, persistent volumes, ingress controllers, secrets, access control, and name spaces
• Manage container image life cycles, vulnerability scanning, least-privilege configurations, and publishing to Azure Container Registry
• Perform server administration, including patching, user provisioning, monitoring, and backup/restoration
• Automate infrastructure and application deployments using Azure Dev Ops or equivalent CI/CD pipelines, ARM/Bicep/Terraform, and Helm
• Implement security and compliance controls aligned with NIST SP 800-53 and Zero Trust
• Develop and maintain runbooks, playbooks, SOPs, and architecture diagrams
• Troubleshoot application, network, infrastructure, and pipeline issues to minimize downtime for AVAP customers
• Contribute to monitoring and metrics collection for availability, scan throughput, failure rates, and license utilization
• Plan and manage assigned work, track follow-up actions, and advise management on priorities, risks, and dependencies
• Lead platform upgrades, image updates, maintenance activities, and rollback testing
• Prepare change documentation and coordinate network, DNS, firewall, certificate, and infrastructure updates
• Develop monitoring, alerting, availability checks, and disaster recovery procedures

• Bachelor’s degree in Computer Science, Information Technology, or related field and 9 years of relevant experience; or master’s degree and 7 years of relevant experience; equivalent hands-on experience may be accepted in lieu of degree
• 3+ years of hands-on experience in system administration and Dev Ops engineering supporting containerized platforms/Kubernetes
• Demonstrated expertise with Azure and familiarity with AWS and GCP cloud services
• Hands-on experience with Azure, Kubernetes administration (AKS), Helm, IaC, CI/CD pipelines, and scripting for platform operations
• Experience with SQL server/database administration, backup/restore, and patching
• Experience working in controlled or regulated environments with formal change processes and security/compliance requirements
• Experience with Terraform, Bicep, and/or ARM for infrastructure automation and immutability
• Strong troubleshooting skills across infrastructure, networking, identity, database, and application layers
• Familiarity with application security tools such as Open Text Fortify Software Security Center, License and Infrastructure Management, and OWASP Dependency-Track is a plus
• Understanding of SAML/OIDC single sign-on, Okta user/group management, and SCIM automatic user provisioning
• Excellent technical writing and documentation skills
• Ability to work within FedRAMP, NIST, FISMA, and Zero Trust compliance frameworks
• US citizenship
• Active secret clearance with ability to obtain a top secret clearance

Demonstrates expertise in designing, deploying, and maintaining secure Azure cloud infrastructure, with a strong focus on Kubernetes administration, CI/CD automation, and compliance with security frameworks such as NIST and Zero Trust. Proficient in troubleshooting and managing containerized platforms while ensuring operational excellence and adherence to formal change processes.

• Azure Cloud Infrastructure Design
• Kubernetes Administration (AKS)
• CI/CD Automation with Azure Dev Ops
• Infrastructure as Code (Terraform, Bicep, ARM)
• Security and Compliance Frameworks (NIST, FedRAMP)

• System Administration
• Dev Ops Engineering
• Container Image Lifecycle Management
• SQL Server/Database Administration
• Scripting for Platform Operations
• Monitoring and Metrics Collection
• Troubleshooting Across Infrastructure Layers
• Backup and Restoration Procedures
• User Provisioning
• Patch Management

• Technical Writing
• Documentation Skills
• Planning and Management
• Communication Skills

• Active Secret Clearance
• Ability to Obtain Top Secret Clearance

• NIST SP 800-53
• Zero Trust
• FedRAMP
• FISMA
• Controlled Environments

• Azure Dev Ops
• Helm
• Open Text Fortify Software Security Center
• OWASP Dependency-Track
• Okta
• SAML/OIDC