Secure Infrastructure Engineer

About this role

<div> <p data-path-to-node="0"><span style="font-size: 10pt;"><strong>Dark Wolf </strong>is seeking a <strong data-path-to-node="0" data-index-in-node="23">Secure Infrastructure Engineer</strong> to join our team. This engineer will be responsible for designing, hardening, and automating the deployment of secure baseline images for a major medical technology client. The ideal candidate will have deep expertise in Windows operating systems and database hardening, specifically aligning with STIGs. You will work within a surgical engineering team to define and build "Gold Images" that balance strict federal compliance with operational functionality. This position will call for support at a main DW office location at a hybrid capacity. Tasks may include assisting with:</span></p> <ul> <li style="font-size: 10pt;" data-path-to-node="1,0,0"><span style="font-size: 10pt;">Designing and creating hardened "Gold Images" for core technologies including Windows Server 2025, Windows 11, and MS SQL.</span></li> <li style="font-size: 10pt;" data-path-to-node="1,0,0"><span style="font-size: 10pt;">Automating the application of DISA STIGs and CIS Benchmarks using PowerShell, Ansible, or similar scripting tools.</span></li> <li style="font-size: 10pt;" data-path-to-node="1,0,0"><span style="font-size: 10pt;">Integrating secure baselines into a centralized artifact repository for consumption by product teams.</span></li> <li style="font-size: 10pt;" data-path-to-node="1,0,0"><span style="font-size: 10pt;">Developing and maintaining documentation for security policies, configuration changes, and exception handling.</span></li> <li style="font-size: 10pt;" data-path-to-node="1,0,0"><span style="font-size: 10pt;">Collaborating with offensive security teams to validate image resilience against vulnerabilities.</span></li> <li style="font-size: 10pt;" data-path-to-node="1,0,0"><span style="font-size: 10pt;">Analyzing vulnerability scan results (from tools like Nessus or proprietary pipelines) and remediating configuration drift.</span></li> <li style="font-size: 10pt;" data-path-to-node="1,0,0"><span style="font-size: 10pt;">Deploying and maintaining a centralized artifact repository on cloud-native architecture (AWS/Azure).</span></li> <li style="font-size: 10pt;" data-path-to-node="1,0,0"><span style="font-size: 10pt;">Building and maintaining CI/CD pipelines to automate the ingestion, scanning, and publishing of secure container images.</span></li> <li style="font-size: 10pt;" data-path-to-node="1,0,0"><span style="font-size: 10pt;">Integrating low-CVE base images (e.g., via Chainguard) into the development supply chain.</span></li> <li style="font-size: 10pt;" data-path-to-node="1,0,0"><span style="font-size: 10pt;">Implementing and managing automated compliance scanning tools (SAST/DAST/Fuzzing) within the build pipeline.</span></li> </ul> <span style="font-size: 10pt;"><strong>Required Qualifications:</strong></span></div> <div> <ul> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Bachelor’s degree in IT Security, Information Systems, or equivalent</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Minimum of 4+ years of experience in Systems Engineering, Infrastructure Operations, or working with commercial cloud providers (AWS, Azure, or GCP)</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Deep expertise in Windows Server and Desktop administration and configuration</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Proven experience applying and managing DoD DISA STIGs or CIS Benchmarks in an enterprise environment</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Extensive experience with Containerization (Docker, Kubernetes) and Container Security</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Strong proficiency in scripting and automation (PowerShell, Python, Ansible, or Terraform) to enforce security configurations</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Solid problem-solving skills and the ability to troubleshoot complex application failures caused by security hardening</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">US Citizenship and ability to be clearable up to the Top Secret clearance with SCI eligibility</span></li> </ul> <h3 data-path-to-node="5"><span style="font-size: 10pt;">Desired Qualifications:</span></h3> <ul> <li style="font-size: 10pt;" data-path-to-node="5"><span style="font-size: 10pt;">Experience working in the healthcare industry or with medical device software</span></li> <li style="font-size: 10pt;" data-path-to-node="5"><span style="font-size: 10pt;">Experience with Platform One, Iron Bank, or…