OS Image Factory Engineer: Secure Auto CI/CD Pipelines

True Zero Technologies LLC.; United States; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Competitive salary

Best in class medical coverage

100% of medical premiums covered

401k with company match

Cell phone/Home Internet reimbursement

Paternity/Maternity Leave

Training and certifications

Résumé du poste

True Zero Technologies LLC is seeking an OS Image Factory Engineer to design, build, and maintain standardized OS images for RHEL and Windows and container images through automated CI/CD pipelines with security scanning and policy enforcement.

You will implement STIG hardening, OpenSCAP validation, and FIPS-enabled configurations, along with image signing and attestation, while collaborating with platform, cloud, and cybersecurity teams to meet regulatory and deployment requirements.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related technical discipline.
• Experience with OS image engineering for RHEL and Windows.
• Hands-on experience creating and managing container images.
• Experience with image automation tools like EC2 Image Builder or Packer.
• Strong CI/CD experience for infrastructure or system artifacts.
• Experience with Ansible for configuration management and automation.
• Experience integrating vulnerability scanning and compliance validation into pipelines.
• Familiarity with DISA STIG hardening and OpenSCAP validation.
• Understanding of FIPS-enabled configurations and image signing.

Responsabilités

• Design, build, and maintain standardized OS images for RHEL and Windows.
• Develop and manage container image build, validation, promotion, and lifecycle processes.
• Create automated image pipelines using EC2 Image Builder and/or Packer.
• Develop CI/CD pipelines that automate image creation, testing, security validation, approval, promotion, and retirement.
• Use Ansible for configuration management and hardening.
• Integrate vulnerability scanning and security assessment into pipelines.
• Implement DISA STIG-hardened configurations and validate with OpenSCAP.
• Produce and maintain FIPS-enabled builds where required.
• Implement image signing and attestation to support Zero Trust supply chain integrity.
• Manage image artifacts, versions, and retention policies in registries.
• Establish lifecycle processes for image creation, testing, release, and retirement.
• Maintain governance and traceability across builds and releases.

Connaissances

OS image engineering

CI/CD pipelines

Vulnerability scanning

Zero Trust security

Security policy enforcement

Formation

Bachelor's degree (Cybersecurity/CS/IT)

Outils

EC2 Image Builder

HashiCorp Packer

Ansible

OpenSCAP

Description du poste

True Zero Technologies LLC is seeking an OS Image Factory Engineer to design, build, and maintain standardized OS images for RHEL and Windows and container images through automated CI/CD pipelines with security scanning and policy enforcement.

You will implement STIG hardening, OpenSCAP validation, and FIPS-enabled configurations, along with image signing and attestation, while collaborating with platform, cloud, and cybersecurity teams to meet regulatory and deployment requirements.