> Markdown version of [/jobs/ext/3062659-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/3062659-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - **Company:** Public Sector - **Location:** San Diego, CA, United States (Remote available) - **Experience:** Expert - **Salary:** $120,000.0 - $135,000.0 - **Contract:** Permanent contract - **Skills:** Agile Methodology, Amazon Web Services, User Authentication, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Continuous Integration, Identity and Access Management, Network Security, Network Segmentation, Public Key Infrastructure, Reliability Engineering, Ansible, Zero Trust Network Access, Security Software, Single Sign-On, Software Engineering, Software Factory, Software Vulnerability Management, Data Logging, Cloud Platform System, Okta, Firewalls (Computer Science), Gitlab, Git Flow, Kubernetes, Information Technology, Hashicorp, Terraform, Devsecops, Security Orchestration, Automation & Response, Vulnerability Analysis - **Published:** September 25, 2026 - **Apply:** https://www.thejobnetwork.com/job/5d626d5a-299a-4b8d-8f02-e6f5ff8e1f37/senior-engineer ## About the Role * 8+ years of relevant experience in cybersecurity, cloud security, cloud architecture, DevSecOps, platform engineering, or a related technical discipline. * Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field. * IAT Level III certification for security-focused personnel. * One or more relevant cloud certifications. * Secret eligible * Experience securing workloads and infrastructure within AWS, Azure, or other enterprise cloud environments; experience with AWS GovCloud or Azure Government is highly desirable. * Experience identifying and remediating vulnerabilities across cloud infrastructure, containers, Kubernetes, operating systems, and applications. * Experience with Infrastructure as Code / Configuration as Code, preferably Terraform, Ansible, Helm, or comparable technologies. * Understanding of GitOps, CI/CD, and DevSecOps security practices. * Experience with identity and access management, PKI, Zero Trust principles, network security, firewalls, or software-defined perimeter technologies. * Experience with security monitoring, vulnerability management, security scanning, logging, and incident troubleshooting. * Working knowledge of DoD RMF, ATO/cATO, STIGs, and DoD cybersecurity requirements. * Ability to work directly with software engineers, platform engineers, SREs, product teams, and government stakeholders to integrate security into engineering workflows rather than treating cybersecurity as a separate compliance activity. * Strong troubleshooting skills and the ability to work effectively in a dynamic Agile environment where requirements and priorities can change. Highly preferred: * Experience with several of the technologies used within the CNAP ecosystem would be particularly valuable: * Kubernetes/RKE2 * Big Bang * Iron Bank * GitLab * Terraform * Ansible * Helm * AWS GovCloud * Azure Government * Palo Alto * AppGate * HashiCorp Vault * Consul * Keycloak * Zeek * Zero Trust * GitOps * Experience supporting Platform One, Cloud One, DoD software factories, CNAP, or another DoD enterprise DevSecOps environment is also highly desirable. Clearance Requirements: * Ability to obtain and maintain an active Secret security clearance ## Description Raft is seeking a Senior Cybersecurity Engineer to support the program's core support team. This role will help secure, operate, and continuously improve the program environment as it provides secure access to protected DoD resources across cloud environments and multiple security classifications. You will work alongside Product, DevSecOps, Site Reliability, and Software Engineering personnel to support team operations and develop security capabilities specific to the cloud platform environment. What You'll Do * Maintain and improve the cybersecurity posture of the cloud platform stack across classified and unclassified environments. * Support Authority to Operate (ATO) and continuous Authority to Operate (cATO) requirements and ensure platform changes remain aligned with the applicable DoD Reference Design and approved security baseline. * Identify, analyze, prioritize, and remediate vulnerabilities across cloud infrastructure, Kubernetes environments, containers, applications, and supporting technologies. * Integrate security controls and automated security testing into DevSecOps and GitOps workflows. * Support continuous monitoring and integration with applicable DoD Cyber Service Providers. * Develop and maintain security automation using Infrastructure as Code and Configuration as Code, including technologies such as Terraform, Ansible, Helm, Kubernetes Operators, and similar tooling. * Ensure the use of current hardened containers from Iron Bank and support updates to platform components outside the Iron Bank/Big Bang baseline, including firewalls, Kubernetes distributions, and cloud-provider services. * Support security capabilities associated with Zero Trust, identity, access control, PKI, authentication, authorization, ingress/egress, and micro-segmentation. * Monitor and update access and security policies, attestations, groups, users, devices, certificates, and resource entitlements. * Support integration with DoD PKI and Single Sign-On capabilities. * Support and secure technologies that may include AppGate, Palo Alto firewalls, HashiCorp Vault and Consul, Keycloak, Zeek, and RKE2/Kubernetes. * Develop and maintain cybersecurity and accreditation documentation in support of the DoD Risk Management Framework (RMF). * Partner with DoD teams and other stakeholders to improve security processes and accelerate secure enterprise deployments. * Participate in Agile development processes, including backlog refinement, technical planning, implementation, testing, and delivery. * Troubleshoot security and access issues affecting platform users and connected applications and services. ## Related Videos - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)