Secure Deployment Engineer

KBR Careers; Colorado Springs (CO); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

401K plan with company match

Medical

Dental

Vision

Life insurance

Paid time off

Flexible work schedule

Job summary

KBR's National Security Solutions team is seeking a Secure Deployment Engineer to support the Department of the Air Force. You will work on secure deployment and operation of the GEMSTONE platform across classified and unclassified environments.

This role requires a Bachelor's degree in Computer Science or related field and over 5 years of experience in information system security engineering. You will ensure security compliance and collaborate with a team of engineers and mission experts.

Qualifications

• 5+ years of experience in information system security engineering (ISSE) or software development/engineering.
• Experience supporting ATO processes for classified or government systems.
• Experience securing hybrid cloud and on-premises architectures.

Responsibilities

• Work closely with developers to integrate security into platform design and deployment workflows.
• Ensure systems comply with DoD STIGs, RMF controls, and security accreditation requirements.
• Collaborate with the platform team to design and evolve a hybrid architecture.

Skills

Linux

Kubernetes

DoD STIGs

RMF framework

Security+

Collaboration

Cyber risk mitigation

Container security

Network security

Active TS clearance

Education

Bachelor's degree in Computer Science or engineering

Tools

Terraform

Zarf

Job description

Title: Secure Deployment Engineer Belong. Connect. Grow. with KBR! KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

Why Join Us?

Innovative Projects: At KBR, you'll be working on cutting-edge projects that support the Department of the Air Force’s most mission-critical operations. Our team is pushing the boundaries of open source development, DevSecOps with state-of-the-art CI/CD pipelines, containerization, Kubernetes, Terraform, Zarf, and innovative API management and database design. You'll be contributing to systems designed for a modeling and simulation SaaS platform that provides dynamic compute power, access to tools, and collaboration capability through a model that will revolutionize the future of military research and development.

Collaborative Environment: Our team thrives in a dynamic, mission-driven environment where our employees work shoulder-to-shoulder with software engineers, DevSecOps architects, product leads, mission experts, and defense specialists. We embrace Agile methodologies and secure development practices to ensure rapid iteration, compliance alignment, and seamless integration across modular systems. Our culture prioritizes clarity, precision, and innovation—fostering open communication, iterative refinement, and deep collaboration to deliver software and documentation that’s not only compliant, but strategic and impactful across DoW.

Impactful Work: Your work here will directly support the Department of the Air Force in advancing defense technology. You’ll be at the forefront of innovations, creating a new paradigm for providing access to compute power, modeling and simulation tools, and data sharing across organizations to the Department of the Air Force and broader Department of Defense.

Position Summary

Support the secure deployment and operation of the GEMSTONE platform across classified and unclassified environments, including air-gapped on-premises systems, ensuring systems are hardened, compliant, and accredited while helping evolve GEMSTONE into a secure hybrid cloud/on-prem platform.

Key Responsibilities

• Work closely with developers to integrate security into platform design and deployment workflows
• Ensure systems comply with DoD STIGs, RMF controls, and security accreditation requirements
• Support deployment of a modeling and simulation platform in cloud and on-premises Kubernetes environments with UDS Core Support and secure air-gapped deployments, including installation, updates, and sustainment in disconnected environments
• Collaborate with the platform team to design and evolve a hybrid architecture spanning cloud and on-prem systems
• Implement and validate security controls, patching, and vulnerability remediation processes
• Support Authority to Operate (ATO) activities, including documentation, validation, and audit readiness
• Partner with the ISSM to maintain continuous monitoring and compliance posture
• Assess and secure containerized workloads, APIs, and Kubernetes-based services
• Guide implementation of network security, access controls, and boundary protections in classified environments
• Participate in security reviews, risk assessments, and incident response activities
• Support accreditation and deployment of applications transitioning to higher classification levels

Work Environment

• Location: Onsite
• Travel Requirements: ~10%
• Working Hours: Standard

Qualifications

• Bachelors degree in Computer Science or engineering related field
• 5+ years of experience in information system security engineering (ISSE) or software development/engineering
• Experience with Linux and Kubernetes
• Strong experience applying DoD STIGs, RMF framework, and security compliance requirements
• Experience supporting ATO processes for classified or government systems
• Experience securing Linux-based systems and hardened environments
• Familiarity with Kubernetes platforms and container security practices
• Experience supporting air-gapped or disconnected system deployments
• Experience securing hybrid cloud and on-premises architectures
• Knowledge of network security principles, including segmentation and access control
• Security+ certification
• Ability to identify and mitigate system vulnerabilities and cyber risks
• Strong collaboration skills to work with developers, platform engineers, and ISSM stakeholders
• Active TS clearance, SCI eligible required
• Must be located in Colorado Springs, CO and able to work on-site in a SCIF

Desired

• Experience with Kubernetes distributions (e.g., UDS Core, OpenShift, Rancher)
• Familiarity with container security tools and vulnerability scanning platforms
• Experience with DevSecOps and securing CI/CD pipelines
• Knowledge of cross-domain or multi-classification system architectures

Basic Compensation

$130,000-$170,000 This range is for the Colorado area only The offered rate will be based on the selected candidate’s work location, knowledge, skills, abilities and/or experience, clearance level, contract affordability and in consideration of internal parity.

KBR Benefits

• 401K plan with company match
• medical
• dental
• vision
• life insurance
• AD&D
• flexible spending account
• disability
• paid time off
• flexible work schedule

We support career advancement through professional training and development.

Belong, Connect and Grow at KBR At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

KBR — Delivering Solutions, Changing the World. KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives. In everything we do, we are guided by our ONE KBR Values:

• We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential.
• We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders.
• We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business.
• We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed.
• We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company.

We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals. Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries. At KBR, We Deliver.