Secure Deployment Engineer: DoD Hybrid Cloud (On-Site)

KBR Careers; Colorado Springs (CO); On-site; USD 130,000 - 170,000; Full time

Job summary

KBR seeks a Secure Deployment Engineer to protect the GEMSTONE platform across classified and unclassified environments, including air-gapped on-premises systems. You will help harden systems, achieve accreditation, and evolve the platform into a secure hybrid cloud/on-prem solution.

You will work with DevSecOps, platform engineers, and ISSM stakeholders to implement security controls, support ATO activities, and ensure DoD RMF compliance across cloud and on-prem deployments.

Qualifications

• 5+ years of experience in information security engineering (ISSE) or software development/engineering.
• Experience with Linux and Kubernetes.
• Strong experience applying DoD STIGs, RMF framework, and security compliance requirements.
• Experience supporting ATO processes for classified or government systems.
• Experience securing Linux-based systems and hardened environments.
• Familiarity with Kubernetes platforms and container security practices.
• Experience supporting air-gapped or disconnected system deployments.
• Experience securing hybrid cloud and on-premises architectures.
• Knowledge of network security principles, including segmentation and access control.
• Security+ certification.
• Active TS clearance, SCI eligible required.
• Must be located in Colorado Springs, CO and able to work on-site in a SCIF.

Responsibilities

• Secure deployment and operation of the GEMSTONE platform across classified and unclassified environments.
• Ensure systems comply with DoD STIGs, RMF controls, and security accreditation requirements.
• Support deployment of a modeling and simulation platform in cloud and on-premises Kubernetes environments.
• Collaborate with platform team to design a hybrid cloud/on-prem architecture.
• Implement and validate security controls, patching, and vulnerability remediation processes.
• Support Authority to Operate (ATO) activities, including documentation and audit readiness.
• Partner with the ISSM to maintain continuous monitoring and compliance posture.
• Assess and secure containerized workloads, APIs, and Kubernetes-based services.
• Guide implementation of network security and boundary protections in classified environments.
• Participate in security reviews, risk assessments, and incident response activities.
• Support accreditation and deployment of applications transitioning to higher classification levels.

Skills

Linux

Kubernetes

Security+

DoD STIGs

RMF

ATO processes

air-gapped deployments

hybrid cloud on-prem

network security

scif on-site

Education

Bachelors in Computer Science or related field

Tools

UDS Core

OpenShift

Terraform

Kubernetes security tools

Job description

KBR seeks a Secure Deployment Engineer to protect the GEMSTONE platform across classified and unclassified environments, including air-gapped on-premises systems. You will help harden systems, achieve accreditation, and evolve the platform into a secure hybrid cloud/on-prem solution.

You will work with DevSecOps, platform engineers, and ISSM stakeholders to implement security controls, support ATO activities, and ensure DoD RMF compliance across cloud and on-prem deployments.