Cloud Application Security Engineer

Elluminates Software seeks an Application Vulnerability Assessment Program (AVAP) Engineer/System Administrator to operate application security platforms and Kubernetes infrastructure in Azure.

Responsibilities

• Design, deploy, and maintain secure, scalable, and resilient cloud infrastructure in Azure (Azure Key Vault, Azure SQL Server, Azure SQL DB, Azure Kubernetes Service (AKS), and related services)
• Operate and administer Kubernetes clusters on AKS including node pools, networking, persistent volumes, ingress controllers, secrets management, access control, and namespaces
• Provide system administration for Windows and Linux environments
• Manage container image lifecycle and updates: pull hardened images (Iron Bank), scan for vulnerabilities, enforce least-privilege configurations, and publish to ACR
• Perform regular server administration tasks such as patching, user provisioning, system monitoring, and backup/restoration
• Automate infrastructure and application deployments using Azure DevOps or equivalent CI/CD pipelines with ARM/Bicep/Terraform and Helm
• Implement and enforce security and compliance controls aligned to NIST SP 800-53 and Zero Trust (including key vault integration, secret management, and TLS certificate rotation)
• Develop and maintain operational runbooks, playbooks, SOPs, and system/network architecture diagrams for repeatability and ongoing documentation
• Troubleshoot platform and pipeline issues across application, network, and infrastructure layers to help minimize downtime for AVAP customers
• Support program-level reporting through monitoring and metrics collection (availability, scan throughput, failure rates, license utilization)

Requirements

• 3+ years of demonstrated experience
• Demonstrated expertise with Azure (preferred) and familiarity with AWS and GCP
• Hands-on experience administering Kubernetes (AKS), Helm, and containerization with Docker
• System administration experience for both Windows and Linux
• Experience with system administration for SQL servers/databases including backup/restore and patching
• Infrastructure-as-Code experience with ARM/Bicep and/or Terraform, plus CI/CD pipeline experience with Azure DevOps
• Demonstrated experience with Terraform, Bicep, and/or ARM for infrastructure automation and immutability
• Strong troubleshooting skills across networking, compute, and application layers
• Application security tooling experience is a plus (OpenText Fortify Software Security Center, License and Infrastructure Management, OWASP Dependency-Track, etc.)
• Understanding of SSO with SAML/OIDC (user/group management in Okta) and SCIM for automatic provisioning
• Excellent technical writing and documentation skills
• Ability to work within government compliance frameworks including FedRAMP, NIST, FISMA, and Zero Trust
• Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent hands-on experience

Technologies

• OpenText Fortify, OWASP Dependency-Track
• Azure Kubernetes Service (AKS), Kubernetes
• Azure, Azure Key Vault, Azure SQL Server, Azure SQL DB
• Azure DevOps, ARM, Bicep, Terraform, Helm
• Docker, ACR, Iron Bank
• Infrastructure-as-Code, CI/CD
• Windows, Linux, TLS cert rotation
• NIST SP 800-53, Zero Trust, FedRAMP, FISMA
• SAML, OIDC, Okta, SCIM

Benefits

• Medical, Dental & Vision options

Security Clearance

• Active Secret clearance with ability to obtain a Top Secret

Location and Schedule

• Washington, DC (Northwest D.C. Hybrid)
• Normal business hours
• 3 days on-site and 2 days hybrid (Monday or Friday)
• Local travel

Employment Details

• Full-Time
• Salary: USD 134,000 - 185,000 per year
• Target salary range: $134,000.00 to $185,000.00