Air-Gapped Kubernetes Security Engineer (RMF/ATO)

Pueo Business Solutions LLC; McLean (VA); On-site; USD 148,000 - 168,000; Full time

Job summary

Pueo is seeking an experienced Cyber Security Engineer to join our team in McLean, VA. The role focuses on designing air-gapped Kubernetes/OpenShift clusters, implementing zero-trust architectures, and automating RMF/ATO evidence generation for classified environments.

You will work across CI/CD security, DISA STIGs, NIST 800-53 controls, and PKI management, coordinating with development, security, and operations to maintain secure, compliant platforms in SCIFs.

Qualifications

• Must have an active Top Secret clearance with SCI eligibility and be able to obtain a CI poly.
• Bachelor’s degree and 12+ years of experience, or 16+ years in lieu of a degree.
• Must possess one of IAT III certifications (e.g., CASP+, CCNP Security, CISA, CISSP, GCED, GCIH, CCSP).
• Extensive experience with Kubernetes, OpenShift, RKE2, and container registry management in air-gapped environments.
• Deep understanding of CI/CD architectures in disconnected networks.
• Expertise in NIST 800-53, DISA STIGs, RMF, and ATO processes.
• Familiarity with SAST/DAST/IAST/IaC tooling and automated compliance validation.
• Proven record enforcing Zero Trust, PKI management, and network segmentation in classified environments.
• Ability to map pipeline artifacts to RMF/ATO controls and support security operations during incidents.
• Extensive experience in cybersecurity design and architecture.

Responsibilities

• Lead or contribute to security initiatives requiring cross-functional coordination
• Manage competing priorities and complex stakeholder relationships
• Architect secure, scalable containerized platforms for mixed-sensitivity workloads in SCIFs
• Map CI/CD artifacts to RMF/ATO controls and accelerate authorization timelines through automation
• Tailor and reconcile federal compliance requirements across NIST, CNSS, and program directives
• Implement and enforce Zero Trust principles end-to-end (build through runtime)
• Operate and troubleshoot Kubernetes clusters in air-gapped enclaves with minimal external support
• Detect, investigate, and respond to security incidents while maintaining data integrity in classified environments
• Coordinate between development, security, and operations teams to implement secure, compliant practices
• Design and execute disaster recovery and resilience strategies across isolated sites

Skills

Kubernetes

OpenShift

RKE2

Container registry management

CI/CD security

Zero Trust

PKI management

RMF/ATO controls

NIST 800-53

DISA STIGs

Education

Bachelor’s degree in related field

16+ years of combined experience in lieu of degree

Tools

OPA Gatekeeper

Kyverno

Prometheus

auditd

eMASS integration

Job description

Pueo is seeking an experienced Cyber Security Engineer to join our team in McLean, VA. The role focuses on designing air-gapped Kubernetes/OpenShift clusters, implementing zero-trust architectures, and automating RMF/ATO evidence generation for classified environments.

You will work across CI/CD security, DISA STIGs, NIST 800-53 controls, and PKI management, coordinating with development, security, and operations to maintain secure, compliant platforms in SCIFs.