Senior Cloud OSCAL Developer

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the worlds leading mission capability integrator and transformative enterprise IT provider we deliver trusted highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land sea space air and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day our employees do the cant be done by solving the most daunting challenges facing our customers. Visit to learn how were keeping people around the world safe and secure.

Peraton is seeking a Senior Cloud / Open Security Controls Assessment Language (OSCAL)Developer to architect and lead the development of the enterprise security compliance automation infrastructure for a Department of Justice customer. This role develops the cloud-based automation framework enabling continuous pipeline-driven ATO package production implementing DevSecOps best practices to automate the flow of security scan data through OSCAL tooling and into the GRC platform. Works independently designing new automation components and major enhancements.

Responsibilities

• Architect the enterprise integration layer connecting all five pipeline components: Heimdall Server MITRE SAF CLI Compliance Trestle OSCAL-CLI and GRC platform ingestion layer
• Design and implement automated data flows from all scan sources (Tenable Splunk AD/Azure AD Guardium WebInspect NMAP) to OSCAL artifacts and the GRC platform
• Implement DevSecOps best practices: CI/CD pipelines automated security testing gates Infrastructure as Code and OPA-based automated compliance checking
• Develop and implement cloud applications supporting the pipeline in AWS GovCloud (IL5) and AWS Secret Region (IL6); manage cloud policies availability design and security architecture
• Provide strategies for failure/recovery and cost optimization; establish coding standards security practices and API contracts; lead code reviews; mentor junior and mid-level developers.
• Coordinate with Senior ISSEs and the DPM to validate pipeline outputs and ensure OSCAL artifacts reflect current system security state

#FederalCyberISaaS

Required Qualifications

• Top Secret security clearance upon hire. The selected candidate must be eligible to obtain/maintain a TS/SCI clearance and successfully complete a polygraph examination if required by the customer. Must be a U.S. Citizen.
• Bachelors Degree in CS Software Engineering IT or related field. Additional years of experience may be considered in lieu of degree.
• Minimum 8 years of software development or DevSecOps engineering in a federal or DoD environment
• Hands-on experience with OSCAL and at least two of: Heimdall Server MITRE SAF CLI Compliance Trestle OSCAL-CLI
• Proficiency in Python Go and/or Bash; REST API development; CI/CD tools (GitLab Jenkins or GitHub Actions)
• Experience in AWS GovCloud IL5 AWS Secret Region (IL6) or Azure Government
• CompTIA Security or equivalent

Desired Qualifications:

• OPA/Rego GRC platform API experience
• CISSP or CASP
• ISC2 CSSLP (Certified Secure Software Lifecycle Professional)
• AWS Certified Developer Professional
• AWS Certified DevOps Engineer Professional
• AWS Certified Solutions Architect Professional
• Microsoft Certified: DevOps Engineer Expert
• CKA (Certified Kubernetes Administrator)
• CKS (Certified Kubernetes Security Specialist)

Peraton offers eligible employees a variety of benefits including medical dental vision life health savings account short/long term disability EAP parental leave 401(k) paid time off (PTO) for vacation and company paid holidays. A full listing of available benefits can be viewed at Statements