{"id":2552734,"url":"https://alion.io/job/pueo-cyber-security-engineer-senior","title":"Cyber Security Engineer (Senior)","company":{"id":2598495,"name":"Pueo","domain":"pueo.com","url":"https://alion.io/company/pueo","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":117000,"max_usd":226000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1245},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Cosign","optional":false},{"name":"Docker","optional":false},{"name":"Falco","optional":false},{"name":"GitLab","optional":false},{"name":"Grype","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"NIST 800-53","optional":false},{"name":"OPA Gatekeeper","optional":false},{"name":"OpenShift","optional":false},{"name":"PKI","optional":false},{"name":"Prometheus","optional":false},{"name":"SBOM","optional":false},{"name":"Service Mesh","optional":false},{"name":"Syft","optional":false},{"name":"Trivy","optional":false},{"name":"Zero Trust","optional":false},{"name":"Open Policy Agent","optional":true}],"status":"live","first_seen_at":"2026-09-30T13:43:25Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T17:40:07Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Description\nPueo is known for bringing the best talent and unique tools to every opportunity. Pueo's Parliament (aka workforce) is composed of professionals who are seeking the opportunity to work in a business organization that thrives on career development and independence. In support of mission and professional growth, our Parliament has supported the development of multiple patents, proprietary tools, and applications as well as trademarked processes.\nOur organization emphasizes career development across multiple career environments (at the members own pace) and ensures those who contribute broadly are properly rewarded. Pueo has four career environments where every member of the parliament can participate. Each environment has opportunities available for all levels. Opportunities are framed by an employee's desires and capabilities, and we ensure challenges, growth, and unique experiences are available for employees at all levels.\nOur Career Environments (Program, Functional, Service, and Leadership) provide numerous opportunities for employees to invest in their personal growth and those things that offer fulfillment. We invest in helping our members create and execute their career development plans. Our Pods (small teams of 5 or less) are comprised of personnel with similar skillsets to ensure mentorship, understanding, and peer support.\nRoles and Responsibilities:\nCybersecurity Engineer to design, and secure air-gapped Kubernetes/OpenShift platforms in classified enclaves. This role combines container platform expertise, federal compliance (NIST 800-53, DISA STIGs, RMF/ATO), CI/CD security automation, and incident response operations. Support architect disconnected container ecosystems, aid implementation of automated security controls, accelerate ATO timelines, and assess platforms supporting mixed sensitivity workloads in SCIFs.\nAir-Gapped Container Platforms: Design and aid implementation of multi-tenant Kubernetes/OpenShift clusters in disconnected enclaves. Manage registry governance, image signing, SBOM/provenance, vulnerability gating, and offline patching. Implement admission control (OPA Gatekeeper, Kyverno) and RBAC for multi-tenancy in classified environments.\nCI/CD Security Automation: Aid design/securing CI/CD pipelines integrating SAST, DAST, IaC scanning, and automated compliance checks. Generate RMF/ATO evidence via OSCAL mappings and eMASS integration. Enforce promotion gates requiring signed/provenanced artifacts and passing STIG checks.\nFederal Compliance & RMF: Tailor NIST 800-53 controls for containerized systems using shared responsibility matrices. Apply Kubernetes/Docker/OpenShift DISA STIGs and track exceptions. Implement continuous monitoring (CONMON) dashboards via on-prem tools (Prometheus, Falco, auditd). Reduce ATO lead times through automation and evidence generation.\nZero Trust & Identity: Implement Zero Trust in Kubernetes using mTLS, service mesh (SPIFFE/SPIRE), and identity propagation across build/runtime layers. Manage offline PKI operations with short-lived certificates and air-gapped roots. Design east-west segmentation and cross-domain artifact transfer with tamper-evident controls.\nKnowledge, Skills, and Abilities:\nKnowledge:\nWorking knowledge of RMF, NIST standards, SA&A processes, DoD cybersecurity policies to include:\nFederal cybersecurity frameworks: NIST 800-53, DISA STIGs, CNSS/CNSSI policies, RMF/ATO workflows\nContainer security standards and hardening baselines for Kubernetes, OpenShift, Docker\nOSCAL control mapping frameworks and eMASS integration\nShared responsibility models in cloud-native and containerized environments\nZero Trust architecture principles and implementation patterns\nCompliance automation and evidence generation best practices\nMulti-domain classification handling and cross-domain data movement\nSkills:\nStrong interpersonal and communication skills to engage senior Government stakeholder\nHands-on expertise with Kubernetes, OpenShift, RKE2 in air-gapped/classified environments\nContainer registry management (image signing, SBOM generation, vulnerability scanning: Trivy, Grype, Syft, Cosign)\nCI/CD pipeline design and implementation (GitLab, Jenkins) for disconnected networks with artifact promotion\nSecurity testing automation: SAST, DAST, IAST, SCA, IaC scanning, and pipeline integration\nKubernetes security hardening, admission control (OPA Gatekeeper, Kyverno), and RBAC design\nAbilities:\nLead or contribute to security initiatives requiring cross-functional coordination\nManage competing priorities and complex stakeholder relationships\nArchitect secure, scalable containerized platforms for mixed-sensitivity workloads in SCIFs\nMap CI/CD artifacts to RMF/ATO controls and accelerate authorization timelines through automation\nTailor and reconcile federal compliance requirements across NIST, CNSS, and program-specific directives\nImplement and enforce Zero Trust principles end-to-end (build through runtime)\nOperate and troubleshoot Kubernetes clusters in air-gapped enclaves with minimal external support\nDetect, investigate, and respond to security incidents while maintaining data integrity in classified environments\nCoordinate between development, security, and operations teams to implement secure, compliant practices\nDesign and execute disaster recovery and resilience strategies across isolated sites\nRequirements\nIAT/IAM III Required:\n· Certified Information Security Manager (CISM)\nor\n· Certified Information Security Analyst (CISA)\nor\n· Certified Information Systems Security Professional (CISSP)\nCertifications Preferred\n· Certified Kubernetes Administrator (CKA)\n· Certified Kubernetes Security Specialist (CKS)\n· GIAC Security Essentials Certification (GSEC)\n· Red Hat Certified Specialist in Kubernetes Administration (RHCSA/RHCE)\n· Certified Application Security Engineer (CASE)\nEducation\nBachelor's degree in Cyber Security, Information Technology, or related field.\nSecurity Requirement:\nHold a Top Secret Security Clearance with SCI eligibility.\nAbility to Pass CI Poly.\nPueo is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. Pueo takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.","description_format":"text","description_chars":6570,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","National Security","Application Security","Homeland Security"],"lifecycle":[{"event":"open","at":"2026-10-14T18:22:55Z"}],"visa":[],"liveness":{"score":75,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.832,"p_room":0.9,"age_days":14,"expected_fill_days":38,"reasons":["conf:2","win:mid"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/pueo-cyber-security-engineer-senior","json_url":"https://alion.io/job/pueo-cyber-security-engineer-senior.json","meta":{"generated_at":"2026-10-15T18:33:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28162,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2598495},"rest":"https://alion.io/mcp/rest/get_company?id=2598495"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpueo-cyber-security-engineer-senior"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpueo-cyber-security-engineer-senior"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpueo-cyber-security-engineer-senior"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pueo-cyber-security-engineer-senior\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpueo-cyber-security-engineer-senior"}]}