Security Compliance Engineer — STIG/RMF Automation

Tata Consultancy Services Limited; Fort Collins (CO); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage (Health

401K Plan

Certification & Training Reimbursement

Vacation & Holidays

Job summary

Tata Consultancy Services Limited is seeking an Engineer in Fort Collins, CO to build and maintain STIG/SRG hardening automation across OS and application layers. The role focuses on hardened RHEL 8/9 and Windows Server 2022 pipelines, automation of compliance scanning, and documentation of POA&M inputs for reviews.

Candidates should have experience with DISA/STIG, RMF/ATO, and CKL generation, contributing to secure baselines and drift detection in a complex environment.

Qualifications

• DISA STIG and SRG experience.
• SCAP tooling and STIG Viewer.
• Federal RMF / ATO process knowledge.
• Security hardening for RHEL and Windows Server environments.

Responsibilities

• Build STIG/SRG hardening automation for OS and application layers.
• Develop and maintain hardened RHEL 8, RHEL 9 and Windows Server 2022 OVA pipelines.
• Automate compliance scanning and CKL generation.
• Document control exceptions, mitigations and recommended POA&M inputs for HPE review.
• Support configuration-drift detection against hardened baselines.

Skills

Compliance

Education

Bachelor of Computer Science

Job description

Tata Consultancy Services Limited is seeking an Engineer in Fort Collins, CO to build and maintain STIG/SRG hardening automation across OS and application layers. The role focuses on hardened RHEL 8/9 and Windows Server 2022 pipelines, automation of compliance scanning, and documentation of POA&M inputs for reviews.

Candidates should have experience with DISA/STIG, RMF/ATO, and CKL generation, contributing to secure baselines and drift detection in a complex environment.