Hands-on Linux Security & Compliance Engineer (STIG/CMMC)

NexTech Solutions LLC; Tampa (FL); On-site; USD 110,000 - 160,000; Full time

Job summary

NexTech Solutions LLC in Tampa, FL seeks a Security Compliance Engineer to own a hands-on program translating control requirements into hardened Linux configurations, automated scans, and auditable evidence. You will write Ansible playbooks, triage CVEs, and operate scanning tools while partnering with engineering for secure-by-default infrastructure.

Key responsibilities include STIG implementation, vulnerability management, and supporting FedRAMP and CMMC compliance activities with an emphasis

Qualifications

• Experience securing Linux systems in regulated environments.
• Ability to read and implement DISA STIGs and CIS Benchmarks.
• Hands-on with automation for compliance pipelines.

Responsibilities

• Implement and maintain STIGs across Linux distros using OpenSCAP and Ansible.
• Develop automated hardening pipelines for configurable OS images.
• Operate vulnerability management and triage CVEs at scale.
• Maintain SSP/CIS/SAR/SAP documentation sets for authorization.
• Collaborate with engineering to sustain secure-by-default infra.
• Support FedRAMP/CMMC readiness and evidence packages.

Skills

Linux security

DISA STIG

FedRAMP

CMMC

Ansible

Vulnerability management

Nessus

Tools

OpenSCAP

Ansible STIG roles

Packer

KIWI/EIB

Tenable Nessus

Job description

NexTech Solutions LLC in Tampa, FL seeks a Security Compliance Engineer to own a hands-on program translating control requirements into hardened Linux configurations, automated scans, and auditable evidence. You will write Ansible playbooks, triage CVEs, and operate scanning tools while partnering with engineering for secure-by-default infrastructure.

Key responsibilities include STIG implementation, vulnerability management, and supporting FedRAMP and CMMC compliance activities with an emphasis