Senior Compliance Automation Engineer
Core
Design and build a purpose-built, continuous compliance monitoring platform from first principles to automate security control validation and evidence generation across hybrid on-premises and multi-cloud environments.
Role type
Senior IC security/compliance automation engineer
Builds
Production-grade compliance automation platform, API frameworks, and CI/CD enforcement gates
Domain
Defense/Space security, NIST compliance, DevSecOps
Deliverable
production ML models | product features | infrastructure
Required skills
Python, Go, TypeScript/Node.js, NIST SP 800-53 Rev. 5, NIST SP 800-171 Rev. 3, Open Policy Agent (OPA), Terraform, Ansible, Pulumi, GitHub Actions, GitLab CI, Jenkins, InSpec, OpenSCAP, AWS GovCloud, Azure Government, webhook-driven integrations, API design, policy-as-code, IaC, STIG validation
Preferred skills
CMMC Level 2 or Level 3 compliance experience, TS/SCI clearance
Technologies
Python, Go, TypeScript, Node.js, OPA, Terraform, Ansible, Pulumi, GitHub Actions, GitLab CI, Jenkins, InSpec, OpenSCAP, AWS Security Hub, AWS Config, Azure Security Center, Microsoft Defender for Cloud
Responsibilities
Architect and build a greenfield Continuous Compliance Monitoring (CCM) platform; Design and implement modular, API-first platform architecture; Develop webhook-driven integration pipelines for telemetry ingestion; Build control validation microservices for NIST controls; Implement evidence collection and artifact management frameworks; Embed compliance enforcement gates into CI/CD pipelines; Develop automated STIG validation workflows; Design integration patterns for on-premises and air-gapped environments; Serve as technical authority on programmatic NIST framework implementation; Build automated compliance scoring and trend analysis capabilities.
Seniority
Senior, hands-on IC