Senior Cloud / OSCAL Developer

Responsibilities

Peraton is seeking a Senior Cloud / Open Security Controls Assessment Language (OSCAL) Developer to architect and lead the development of the enterprise security compliance automation infrastructure for a Department of Justice customer. This role develops the cloud-based automation framework enabling continuous, pipeline-driven ATO package production — implementing DevSecOps best practices to automate the flow of security scan data through OSCAL tooling and into the GRC platform. Works independently designing new automation components and major enhancements.

Responsibilities

• Architect the enterprise integration layer connecting all five pipeline components: Heimdall Server, MITRE SAF CLI, Compliance Trestle, OSCAL-CLI, and GRC platform ingestion layer
• Design and implement automated data flows from all scan sources (Tenable, Splunk, AD/Azure AD, Guardium, WebInspect, NMAP) to OSCAL artifacts and the GRC platform
• Implement DevSecOps best practices: CI/CD pipelines, automated security testing gates, Infrastructure as Code, and OPA-based automated compliance checking
• Develop and implement cloud applications supporting the pipeline in AWS GovCloud (IL5) and AWS Secret Region (IL6); manage cloud policies, availability design, and security architecture
• Provide strategies for failure/recovery and cost optimization; establish coding standards, security practices, and API contracts; lead code reviews; mentor junior and mid-level developers.
• Coordinate with Senior ISSEs and the DPM to validate pipeline outputs and ensure OSCAL artifacts reflect current system security state

#FederalCyberISaaS

Qualifications

Required Qualifications

• Top Secret security clearance upon hire. The selected candidate must be eligible to obtain/maintain a TS/SCI clearance and successfully complete a polygraph examination if required by the customer. Must be a U.S. Citizen.
• Bachelor's Degree in CS, Software Engineering, IT, or related field. Additional years of experience may be considered in lieu of degree.
• Minimum 8 years of software development or DevSecOps engineering in a federal or DoD environment
• Hands-on experience with OSCAL and at least two of: Heimdall Server, MITRE SAF CLI, Compliance Trestle, OSCAL-CLI
• Proficiency in Python, Go, and/or Bash; REST API development; CI/CD tools (GitLab, Jenkins, or GitHub Actions)
• Experience in AWS GovCloud IL5, AWS Secret Region (IL6) or Azure Government
• CompTIA Security+ or equivalent

Desired Qualifications:

• OPA/Rego | GRC platform API experience
• CISSP or CASP+
• ISC2 CSSLP (Certified Secure Software Lifecycle Professional)
• AWS Certified Developer – Professional
• AWS Certified DevOps Engineer – Professional
• AWS Certified Solutions Architect – Professional
• Microsoft Certified: DevOps Engineer Expert
• CKA (Certified Kubernetes Administrator)
• CKS (Certified Kubernetes Security Specialist)

Target Salary Range$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Benefits Statement

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Application StatementsThe application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.