Senior Platform Engineer/ISSE

Eliassen Group; Reston (VA); On-site; USD 180,000 - 200,000; Full time

Job summary

Eliassen Group is seeking a Senior Platform Engineer/ISSE to design, implement, and monitor security controls across containerized and cloud environments in Reston, VA. This on-site role focuses on securing Kubernetes platforms, logging, monitoring, and aligning with NIST RMF and FedRAMP.

The position is full-time with a comprehensive benefits package. Qualified candidates must hold TS/SCI clearance, CISSP or equivalent, and be willing to work on a W-2 basis in a high-impact environment.

Qualifications

• 7+ years in cybersecurity with security controls design and monitoring.
• Hands-on Kubernetes security experience; OpenShift preferred.
• Experience with NIST SP 800-53, RMF, FISMA, FedRAMP.
• Experience securing cloud/container environments and DevSecOps.
• Strong log analytics with Splunk.

Responsibilities

• Design, implement, and maintain security controls aligned to NIST RMF.
• Secure containerized and Kubernetes environments (OpenShift).
• Implement continuous monitoring and auditing across IL5 to IL6+.
• Configure and optimize Splunk log collection and analytics.
• Support incident response and forensic analysis.
• Integrate Fortify, Acunetix, and Prisma Cloud; automate security.
• Collaborate with platform engineering to embed DevSecOps practices.
• Communicate risks and mitigations to stakeholders.

Skills

Kubernetes security

DevSecOps

Incident response

Security monitoring

RMF/NIST

Cloud security

Education

Bachelor's degree in CS/InfoSec

CISSP certification

TS/SCI clearance

Tools

Splunk

Fortify

Acunetix

Prisma Cloud

OpenShift

Job description

Description:

On-site in Reston, VA

Our client seeks a Senior Platform Engineer/ISSE to design, implement, and continuously monitor security controls across containerized and cloud environments. The role will secure Kubernetes platforms, integrate logging and monitoring, and align solutions with NIST RMF and related frameworks in high-impact environments. The engineer will collaborate with platform, security, and operations teams to ensure compliant, resilient, and observable systems.

This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.

Salary: $180,000 - $200,000/ yr.

Responsibilities:

• Design, implement, and maintain required security controls aligned to NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
• Secure containerized and Kubernetes environments, preferably OpenShift, including cluster hardening and runtime protections.
• Implement continuous monitoring and auditing for control compliance across IL5 to IL6+ environments.
• Configure and optimize log collection and analytics in tools such as Splunk to detect anomalies and risks.
• Execute routine security checks on a daily, weekly, and monthly cadence in alignment with NIST RMF.
• Support incident response, security incident handling, and forensic analysis.
• Integrate and operate security tools including Fortify, Acunetix, and Prisma Cloud.
• Partner with platform engineering to embed DevSecOps practices and automate security control enforcement.
• Communicate technical risks and mitigations to technical and non-technical stakeholders.

Experience Requirements:

• 7+ years as a cybersecurity engineer with proven security control design, build, and continuous monitoring.
• Hands-on Kubernetes security experience; OpenShift preferred.
• Strong skills in log collection, Splunk querying, and security analytics.
• Demonstrated experience with NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
• Experience implementing controls for cloud, container, and DevSecOps solutions in IL5 to IL6+ environments.
• Understanding of network protocols, operating systems, and core infrastructure.
• Experience conducting periodic security checks aligned to RMF.
• Proficiency in incident response and forensic techniques.
• Experience with Fortify, Acunetix, and Prisma Cloud.
• CISSP or equivalent meeting DoD 8140 requirements.
• Active TS/SCI; CI poly preferred or willingness to obtain.
• Nice to have: service mesh security knowledge (e.g., Greymatter), AWS or Kubernetes-related cloud certifications, and advanced container security tooling expertise.

Education Requirements:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• CISSP or equivalent meeting DoD 8140 requirements.
• Active TS/SCI; CI poly preferred or willingness to obtain.