Senior Cybersecurity Engineer: Air-Gapped K8s & Zero Trust

Cybersecurity Jobs; McLean (VA); On-site; USD 148,000 - 168,000; Full time

Job summary

Pueo Business Solutions LLC in McLean, VA is seeking a senior cybersecurity engineer to design and secure air-gapped Kubernetes and OpenShift platforms operating within classified enclaves. The role integrates CI/CD security automation, RMF/ATO evidence, Zero Trust controls, and incident response to reduce authorization timelines.

Design and secure multi-tenant clusters, manage registry governance, implement OPA Gatekeeper and Kyverno, and support automated compliance checks in air-gapped

Qualifications

• Active Top Secret clearance or equivalent eligibility.
• CI poly eligibility
• 16+ years of related experience can substitute for a degree per DoD guidelines.

Responsibilities

• Design and assist implementation of multi-tenant Kubernetes/OpenShift clusters in disconnected enclaves.
• Manage registry governance including image signing, SBOM/provenance, vulnerability gating, and offline patching.
• Implement admission control using OPA Gatekeeper and Kyverno with RBAC for multi-tenancy in classified environments.
• Assist with securing CI/CD pipelines with SAST, DAST, IaC scanning and automated compliance checks.
• Generate RMF/ATO evidence via OSCAL mappings and eMASS integration.
• Enforce promotion gates with signed, provenance-verified artifacts and successful STIG checks.
• Tailor NIST 800-53 controls for containerized systems and document shared responsibility matrices.
• Enforce Kubernetes/Docker/OpenShift DISA STIGs and manage related exceptions.
• Operate CONMON dashboards with on-prem Prometheus, Falco, and auditd for continuous monitoring.
• Reduce ATO lead times through automation and evidence generation.

Skills

Kubernetes

OpenShift

RKE2

CI/CD security

Zero Trust

PKI management

RMF/ATO mappings

Disaster recovery

Education

Bachelor’s degree in a related field

Tools

OPA Gatekeeper

Kyverno

SAST

DAST

IaC scanning

eMASS

OSCAL

Prometheus

Falco

auditd

Job description

Pueo Business Solutions LLC in McLean, VA is seeking a senior cybersecurity engineer to design and secure air-gapped Kubernetes and OpenShift platforms operating within classified enclaves. The role integrates CI/CD security automation, RMF/ATO evidence, Zero Trust controls, and incident response to reduce authorization timelines.

Design and secure multi-tenant clusters, manage registry governance, implement OPA Gatekeeper and Kyverno, and support automated compliance checks in air-gapped