Remote Security Compliance Engineer - Linux & FedRAMP Expert

Kids for the Future; United States; Remote; USD 180,000 - 200,000; Full time

Benefits offered by this job

Remote position

Health benefits

Paid time off

Job summary

NexTech Solutions is seeking a Security Compliance Engineer to lead Linux-based security hardening and regulatory compliance programs. You will translate control requirements into hardened configurations, automated scans, and auditable evidence, partnering with engineering teams to keep secure-by-default infrastructure.

The role is hands-on with reading STIGs, writing Ansible playbooks, CVE triage, and operating scanning tooling.

Qualifications

• 5+ years in information security, system hardening, or security compliance engineering.
• Hands-on DISA STIG experience across RHEL/CentOS and one other OS (Ubuntu/Windows).
• Proficiency with Ansible for automated configuration management at scale.
• Direct involvement in FedRAMP authorization or continuous monitoring programs.

Responsibilities

• Apply and maintain DISA STIGs across Linux distributions using OpenSCAP and Ansible STIG roles.
• Develop automated hardening pipelines to produce STIG-compliant OS images for various deployment targets.
• Configure host-based security controls: SELinux, auditd, fapolicyd, firewalld, PAM.
• Maintain STIG checklists and produce POA&M artifacts for findings.

Skills

DISA STIGs

Ansible

OpenSCAP

Nessus

CVE triage

Linux administration

PAM/SELinux

SBOM tools

CI/CD pipelines

Tools

OpenSCAP

Nessus

Grype

Syft

CycloneDX

Sigstore

Packer

Job description

NexTech Solutions is seeking a Security Compliance Engineer to lead Linux-based security hardening and regulatory compliance programs. You will translate control requirements into hardened configurations, automated scans, and auditable evidence, partnering with engineering teams to keep secure-by-default infrastructure.

The role is hands-on with reading STIGs, writing Ansible playbooks, CVE triage, and operating scanning tooling.