Cloud Application Security Engineer

Elluminates Software is seeking a Cloud Application Security Engineer to support an Application Vulnerability Assessment Program (AVAP). The role will operate and secure application security platforms and Kubernetes-based infrastructure in Azure AKS, while managing hardened container image workflows, automation, and security controls aligned to federal requirements.

Location and Work Schedule

• Location: Washington, DC (Northwest D.C. Hybrid)
• Hybrid schedule: 3 days on-site and 2 days hybrid (with Monday or Friday as the hybrid day)
• Travel: Local
• Type: Full-Time

Salary

USD 134,000 - 185,000 per year

Role Summary

The Cloud Application Security Engineer/System Administrator will design and maintain secure cloud infrastructure in Azure, administer AKS clusters, and manage container image lifecycle and updates. The position enforces security and compliance controls aligned to federal standards and supports AVAP customers by troubleshooting platform and pipeline issues to help minimize downtime. Responsibilities also include maintaining operational documentation and contributing to monitoring and metrics used for program-level reporting.

Key Responsibilities

• Design, deploy, and maintain secure, scalable, resilient cloud infrastructure in Azure, including Azure Key Vault, Azure SQL Server, Azure SQL DB, Azure Kubernetes Service (AKS), and related services.
• Operate and administer Kubernetes clusters (AKS), including node pools, networking, persistent volumes, ingress controllers, secrets management, access control, and namespaces.
• Manage system administration for Windows and Linux environments.
• Manage container image lifecycle and updates by pulling hardened images (e.g., Iron Bank), scanning for vulnerabilities, enforcing least-privilege configurations, and publishing to ACR.
• Perform regular server administration tasks including patching, user provisioning, system monitoring, and backup/restoration.
• Automate deployments using Azure DevOps or equivalent CI/CD pipelines with ARM/Bicep/Terraform and Helm.
• Implement and enforce security and compliance controls aligned to NIST SP 800-53 and Zero Trust (including key vault integration, secret management, and TLS certificate rotation).
• Develop and maintain operational runbooks, playbooks, SOPs, and system/network architecture diagrams for repeatable operations and continuous documentation.
• Troubleshoot platform and pipeline issues across application, network, and infrastructure layers to minimize downtime for AVAP customers.
• Contribute to monitoring and metrics collection (availability, scan throughput, failure rates, and license utilization) to support program-level reporting.

Required Qualifications

• 3+ years of relevant experience.
• Demonstrated expertise with Azure (preferred) and familiarity with AWS and GCP.
• Hands-on experience with Kubernetes administration (AKS), Helm, and containerization (Docker).
• Experience with system administration for both Windows and Linux environments.
• Experience with system administration for SQL servers/databases, including backup/restore and patching.
• Experience with Infrastructure-as-Code (ARM/Bicep, Terraform, Helm) and CI/CD pipelines (Azure DevOps).
• Demonstrated experience with Terraform, Bicep, and/or ARM for infrastructure automation and immutability.
• Strong troubleshooting skills across networking, compute, and application layers.
• Excellent technical writing and documentation skills.
• Ability to work within government compliance frameworks including FedRAMP, NIST, FISMA, and Zero Trust.

Additional Skills (Plus)

• Familiarity with application security tools (e.g., OpenText Fortify Software Security Center, License and Infrastructure Management, OWASP Dependency Track).
• Understanding of SSO implementations using SAML/OIDC (including user/group management in Okta) and SCIM for automatic user provisioning.

Education

Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent hands-on experience.

Security Clearance

• Clearance: Active Secret with the ability to obtain a Top Secret

Benefits

• Medical, Dental & Vision options

Technologies

• OpenText Fortify, OWASP Dependency-Track
• Azure Kubernetes Service (AKS), Kubernetes
• Azure, Azure Key Vault
• Azure SQL Server, Azure SQL DB
• Azure DevOps, ARM, Bicep, Terraform, Helm
• Docker, ACR, Iron Bank
• Infrastructure-as-Code, CI/CD
• Windows, Linux
• TLS cert rotation, NIST SP 800-53, Zero Trust
• FedRAMP, FISMA, SAML, OIDC
• Okta, SCIM