{"id":2992323,"url":"https://alion.io/job/pueo-cybersecurity-engineer-expert","title":"Cybersecurity Engineer (Expert)","company":{"id":2598495,"name":"Pueo","domain":"pueo.com","url":"https://alion.io/company/pueo","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":147742,"max":167888,"currency":"USD","period":"year","gross":null,"usd_annual":167888},"salary_estimate":null,"experience_years_min":16,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"Falco","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"NIST 800-53","optional":false},{"name":"OPA Gatekeeper","optional":false},{"name":"OpenShift","optional":false},{"name":"PKI","optional":false},{"name":"Prometheus","optional":false},{"name":"SBOM","optional":false},{"name":"Service Mesh","optional":false},{"name":"Zero Trust","optional":false},{"name":"Open Policy Agent","optional":true}],"status":"live","first_seen_at":"2026-10-20T20:41:04Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-22T02:10:37Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Description\nResponsibilities:\nPueo is seeking a Senior Cyber Security Engineer to join our unique team of multidisciplined experts onsite in McLean, VA.\nThe ideal candidate shall possess experience in design, and secure air-gapped Kubernetes/OpenShift platforms in classified enclaves. This role combines container platform expertise, federal compliance (NIST 800-53, DISA STIGs, RMF/ATO), CI/CD security automation, and incident response operations and supports architect disconnected container ecosystems, aid implementation of automated security controls, accelerate ATO timelines, and assess platforms supporting mixed sensitivity workloads in SCIFs.\nThe Cyber Security Engineer will be responsible for the following but not limited to:\nAir-Gapped Container Platforms: Design and aid implementation of multi-tenant Kubernetes/OpenShift clusters in disconnected enclaves. Manage registry governance, image signing, SBOM/provenance, vulnerability gating, and offline patching. Implement admission control (OPA Gatekeeper, Kyverno) and RBAC for multi-tenancy in classified environments.\nCI/CD Security Automation: Aid design/securing CI/CD pipelines integrating SAST, DAST, IaC scanning, and automated compliance checks. Generate RMF/ATO evidence via OSCAL mappings and eMASS integration. Enforce promotion gates requiring signed/provenanced artifacts and passing STIG checks.\nFederal Compliance & RMF: Tailor NIST 800-53 controls for containerized systems using shared responsibility matrices. Apply Kubernetes/Docker/OpenShift DISA STIGs and track exceptions. Implement continuous monitoring (CONMON) dashboards via on-prem tools (Prometheus, Falco, auditd). Reduce ATO lead times through automation and evidence generation.\nZero Trust & Identity: Implement Zero Trust in Kubernetes using mTLS, service mesh (SPIFFE/SPIRE), and identity propagation across build/runtime layers. Manage offline PKI operations with short-lived certificates and air-gapped roots. Design east-west segmentation and cross-domain artifact transfer with tamper-evident controls.\nLead or contribute to security initiatives requiring cross-functional coordination\nManage competing priorities and complex stakeholder relationships\nArchitect secure, scalable containerized platforms for mixed-sensitivity workloads in SCIFs\nMap CI/CD artifacts to RMF/ATO controls and accelerate authorization timelines through automation\nTailor and reconcile federal compliance requirements across NIST, CNSS, and program-specific directives\nImplement and enforce Zero Trust principles end-to-end (build through runtime)\nOperate and troubleshoot Kubernetes clusters in air-gapped enclaves with minimal external support\nDetect, investigate, and respond to security incidents while maintaining data integrity in classified environments\nCoordinate between development, security, and operations teams to implement secure, compliant practices\nDesign and execute disaster recovery and resilience strategies across isolated sites\nRequirements\nMinimum Required Qualification:\nMust have an active/current Top Secret security clearance with SCI eligibility. Must be able to obtain and maintain a CI poly.\nA Bachelor’s degree in related field and 12 years of experience, or additional 4 years of experience in lieu of a completed degree for a total of 16+ years.\nMust possess a one of the following IAT III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management. (ex; CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP).\nExtensive experience working with Kubernetes, OpenShift, RKE2, and container registry management in air-gapped and classified environments.\nDeep understanding of CI/CD pipeline architectures, especially in disconnected networks.\nExpertise in federal cybersecurity frameworks, such as NIST 800-53, DISA STIGs, RMF, and ATO processes.\nFamiliarity with security testing tools (SAST, DAST, IAST, IaC) and automated compliance validation.\nProven track record of enforcing Zero Trust principles, PKI management, and network segmentation in a classified environment.\nStrong ability to map pipeline artifacts to RMF/ATO controls and support security operations during incidents.\nExtensive experience in cybersecurity design and architecture.\nDesired Qualifications:\nAn active Top Secret security clearance with SCI eligibility and current CI poly.\nRelevant certifications such as Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS), GIAC Security Essentials Certification (GSEC), Red Hat Certified Specialist in Kubernetes Administration (RHCSA/RHCE), or Certified Application Security Engineer (CASE).\nSome experience leading security projects and initiatives. \nTeam-player with collaboration qualities and experience working in mixed technical teams.\nSalary Range Estimate:\nMin $147,742- Max $167,888. The estimate displayed represents the typical salary range for this position and is just one component of Pueo’s total compensation package for employees. Other rewards may include annual bonuses, short- and long-term incentives, and program-specific awards. In addition, Pueo provides a variety of benefits to employees.\nPueo Overview:\nPueo is a National Security cyber company built to inspect, defend, harden, and continuously authorize the networks our customers depend on. We deliver mission-grade cybersecurity across defense, intelligence, homeland security, federal enterprise, and critical infrastructure. Our work connects mission-risk inspection, defensive cyber operations, continuous authorization, security engineering, and mission delivery through one accountable team.\nPueo EEO Statement:\nPueo is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. Pueo takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.","description_format":"text","description_chars":6198,"description_truncated":false,"requirements":{"experience_years_min":16,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Annual bonuses"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","National Security","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-21T10:19:24Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":27,"reasons":["conf:3","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":167888,"is_top_pay":true},"html_url":"https://alion.io/job/pueo-cybersecurity-engineer-expert","json_url":"https://alion.io/job/pueo-cybersecurity-engineer-expert.json","meta":{"generated_at":"2026-10-22T17:43:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":86,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2598495},"rest":"https://alion.io/mcp/rest/get_company?id=2598495"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpueo-cybersecurity-engineer-expert"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpueo-cybersecurity-engineer-expert"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpueo-cybersecurity-engineer-expert"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pueo-cybersecurity-engineer-expert\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpueo-cybersecurity-engineer-expert"}]}