Security Engineer – Container Image Hardening & Compliance

Connexion Systems & Engineering Inc.; Orlando (FL); Remote; USD 96,000 - 110,000; Part time

Job summary

Connexion Systems & Engineering Inc. is seeking an experienced Security Engineer specializing in container image hardening, cloud compliance, and platform security for an enterprise engagement in Orlando, FL.

The role focuses on securing containerized workloads across AWS and OpenShift/Kubernetes, driving automated security controls and aligning infrastructure with STIG, NIST, and FIPS. The candidate will implement and manage security controls within an AWS foundation, integrate Harbor/Trivy

Qualifications

• BS + 6–8 years or MS + 4–6 years of professional experience.
• 4+ years securing containerized workloads in production (OpenShift/Kubernetes).
• 5+ years AWS core security services (EC2, IAM, VPC, CloudTrail, GuardDuty).
• Proficiency in Python, Bash, or PowerShell; compliance guidance in STIG/NIST/FIPS.

Responsibilities

• Architect, build, and harden container images using Red Hat Iron Bank base images and secure configurations.
• Implement security controls within an AWS foundation context (EC2, IAM, VPC, CloudTrail, GuardDuty).
• Enforce STIG, NIST, and FIPS across cloud infra and container lifecycles.
• Integrate image-repository scanning tools (Harbor, Trivy) into CI/CD pipelines (GitLab/GitHub).
• Develop automation scripts and custom security checks (Python, Bash, PowerShell).
• Support Apache OpenSource stack tools (Datahub, Nifi, Airflow, Spark, Trino) and OPA security implementations.

Skills

Cloud Security AWS (EC2, IAM, VPC, Guа

Education

Bachelor's degree in Computer Science or related field

Tools

Harbor

Trivy

GitLab CI

GitHub CI

OpenShift

Kubernetes

Job description

Security Engineer – Container Image Hardening & Compliance

Location: Orlando, FL (Worker will Telework Full Time)

Employment Type: Contingent Non-Employee (Contract / Temporary)

Desired Start Date: 11/23/2026

Estimated End Date: 8/30/2027

Pay Rate $70.00 - $80.00 Hourly (OT40 Exempt)

Position Summary We are seeking an experienced Security Engineer specializing in container image hardening, cloud compliance, and platform security for an enterprise engagement. The ideal candidate will possess deep technical expertise in securing containerized workloads across AWS and OpenShift/Kubernetes environments, driving automated security controls, and aligning infrastructure with STIG, NIST, and FIPS frameworks.

Essential Duties & Responsibilities

• Architect, build, and harden container images utilizing Red Hat Iron Bank base images, custom secure configurations, and clean build-from-scratch approaches.
• Implement and manage security controls within an AWS‑foundational context (EC2, IAM, VPC, CloudTrail, GuardDuty).
• Enforce STIG, NIST, and FIPS compliance frameworks across cloud infrastructure and container lifecycles.
• Integrate image‑repository scanning tools (e.g., Harbor, Trivy) into CI/CD pipelines (GitLab/GitHub) to detect and remediate vulnerabilities.
• Develop automation scripts and custom security checks using Python, Bash, or PowerShell.
• Support Apache OpenSource stack tools (Datahub, Nifi, Airflow, Spark, Trino) and OPA-based security implementations.

Qualifications & Requirements

• Experience Level: Level 3 (BS + 6–8 years or MS + 4–6 years of professional experience).
• Container Security: Minimum of 4 years of hands‑on experience securing containerized workloads in production (OpenShift, Kubernetes) and hardening Linux‑based container images.
• Cloud Security: Minimum of 5 years of experience with AWS core security services (EC2, IAM, VPC, CloudTrail, GuardDuty).
• Scripting & Automation: Strong background in Linux/RHEL paired with proficiency in Python, Bash, or PowerShell.
• Compliance Frameworks: Proven capability in applying STIG, NIST, and FIPS guidelines.
• Citizenship: US Citizenship is required for this position due to facility‑specific constraints.

Skills Matrix Category Skill Name Importance Required Experience

• Cloud Security Amazon Web Services (AWS - EC2, IAM, VPC, GuardDuty) Required 5+ Years
• Containerization Kubernetes / OpenShift Required 4+ Years
• Container Hardening Red Hat Iron Bank / Custom Hardened Images Required 4+ Years
• Compliance STIG, NIST, & FIPS Frameworks Required 3+ Years
• Vulnerability Scanning Harbor, Trivy Required 3+ Years
• Scripting Python, Bash, PowerShell Preferred 3+ Years
• CI/CD Pipelines GitLab / GitHub CI/CD Preferred 2+ Years
• Big Data / Ops Stack Apache OpenSource (Datahub, Nifi, Airflow, Spark, Trino, MinIO)