Cybersecurity Engineer

This is a U.S. based position. All of the programs we support require U.S. citizenship to be eligible for employment. All work must be conducted within the continental U.S.

Who we are:

Raft (https://TeamRaft.com) is a customer-obsessed non-traditional small business with a purposeful focus on Distributed Data Systems, Platforms at Scale, and Complex Application Development, with headquarters in McLean, VA. Our range of clients includes innovative federal and public agencies leveraging design thinking, cutting-edge tech stack, and cloud-native ecosystem. We build digital solutions that impact the lives of millions of Americans.

About the role: 

The Cyber Security Engineer shall have cyber security engineering experience building and securing applications at an Individual Contributor Level, understand all phases of application and service release lifecycle as part of the DevSecOps methodology. A successful candidate knows one or more modern programming languages, has a cyber security background on the cloud, understands computer science fundamentals either through education or experience, and has worked as part of an Agile team to deliver enterprise software solutions across an organization. The candidate shall utilize DevSecOps methodology to successfully secure Platform features/capabilities that are deployed onto a Hybrid infrastructure consisting of onprem and commercial cloud environments.

What we are looking for:

• 5+ years of experience with Terraform, SIEM, AWS.
• 5+ years of experience in managing multiple AWS environments (VPCs, firewalls, IAM, GuardDuty, Cloud Trail, WAF).
• 5+ years of experience leading teams building and developing containerized services deployed in production on orchestration platforms such as Kubernetes, Mesos, etc.
• 5+ years of experience as an administrator and maintainer of Kubernetes clusters, including upgrading, troubleshooting, and deploying applications via GitOps (such as Flux, ArgoCD, or Fleet).
• 3+ years of experience in Identity and Access Lifecycle Management Operations and Controls using tools like Okta or Keycloak.
• Deep understanding of modern microservices architectures, design patterns, resiliency techniques, and optimizations.
• Manage, report, and facilitate certification of access for all in-scope resources (including SaaS, AWS, Azure, CSS managed applications, tools, and systems).
• Work closely with the client and other key stakeholders to provide strategic input and help navigate needs and tradeoffs to build extensible digital solutions
• 3+ years' experience with modern programming languages such as Java, Python, or Go
• Experience managing infrastructure and developed APIs/platform services for tenants to use container services
• Linux experience
• Experience with at least one agile methodology, including Scrum or Kanban
• Obtain Security+ within the first 90 days of employment with Raft
• Bachelor Degree in computer science, Mathematics, or equivalent technical degree; or equivalent industry experience

Highly preferred:

• 3+ years of experience in automated security tooling such as SCA, SAST, DAST, IAST such as Snyk, Checkmarx, GitLab / AWS Security
• Knowledge of NIST RMF and ATO process within the DoD or other highly regulated environments following similar compliance frameworks & security requirements.

Clearance Requirements:

• Must be able to obtain and maintain an Active Secret security clearance

Work Type: 

• Onsite at Hanscom AFB, MA or Langley, VA or Colorado Springs, Co
• May require up to 15% travel

What we will offer you:

• Highly competitive salary
• Fully covered healthcare, dental, and vision coverage
• 401(k) and company match
• Take as you need PTO + 11 paid holidays
• Education & training benefits
• Generous Referral Bonuses
• And More!

Our Vision Statement: 

We bridge the gap between humans and data through radical transparency and our obsession with the mission. 

Our Customer Obsession: