As the Senior STIG Writer, this individual will bring advanced expertise in scripting, compliance automation, and DoD security standards. The ideal candidate will have a deep understanding of DISA STIGs and the DoD remediation process, with the ability to translate STIG requirements into automated technical checks and remediations across diverse environments. This highly technical role demands mastery of multiple scripting languages, operating systems, and networking platforms, ensuring secure, compliant, and scalable solutions.

Responsibilities:

• Reads, analyzes, and interprets DISA STIGs, SRGs, and DoD compliance requirements
• Develops automated compliance checks and remediation scripts in Bash, PowerShell, and Python
• Writes and maintains Ansible playbooks to enforce STIG compliance across enterprise systems
• Builds and validates STIG automation for Linux systems: RHEL, Ubuntu, Oracle Linux, and Alma Linux
• Builds and validates STIG automation for Windows Server and Desktop systems
• Extends automation support to networking devices such as Cisco IOS/ASA and Juniper platforms
• Applies in-depth knowledge of the DoD remediation process, severity overrides, and waiver handling
• Collaborates with compliance and engineering teams to implement secure baselines
• Supports CORA, CCRI, and ATO readiness activities through technical STIG coding and validation
• Works with cross-functional teams (security engineers, system administrators, developers) to validate automated checks
• Provides detailed documentation of scripts, remediations, and validation results
• Mentor junior engineers on STIG interpretation and automation techniques

Required Qualifications/Education and Experience:

• 5+ years of experience in cybersecurity compliance engineering or related roles.

• Proven expertise writing automation in Bash, PowerShell, and Python.

• Strong knowledge of Linux platforms: RHEL, Ubuntu, Oracle Linux, AlmaLinux

• Strong knowledge of Windows systems: Server and Desktop editions

• Strong knowledge of Networking devices: Cisco IOS/ASA, Juniper EX/OS

• High-level knowledge of STIGs – ability to interpret, implement, and validate compliance requirements

• Demonstrated experience writing Ansible playbooks for STIG enforcement

• Understanding of the DoD remediation process, including POA&Ms, waivers, and Severity Overrides

• Familiarity with DISA tools (SCAP, STIG Viewer, ACAS/Nessus)

• Strong documentation, troubleshooting, and collaboration skills

• Experience supporting CORA, CCRI, or ATO audits

Preferred Qualifications/Education and Experience.

• Familiarity with containerized environments (Docker, Podman, Kubernetes) and their STIGs

OSC Edge delivers a total rewards package that we know will attract, engage and retain top talent. Key elements of our package include a competitive base pay and a comprehensive benefits package:

We offer eligible employees with an opportunity to enroll in a variety of benefits offerings. Here are just some of our benefits for our US based positions:

• Medical/ Dental/ Vision
• Life insurance and AD&D
• Flexible Spending
• Accident, Critical Illness and Hospital Indemnity coverage
• 401(k) and ROTH retirement options and company match
• Pet Insurance
• Identify Theft and Fraud Protection coverage

About OSC Edge:

Founded in 2008, what started as a small business has grown into a diverse and innovative global team owned by Cook Inlet Region, Inc. an Alaska Native Regional Corporation. As a US Federal contractor, we are a dedicated IT Service Provider supporting the Departments of the Army, Navy, Air Force, DoD Educational Institutions, and large corporate entities. Our expertise is in Cloud Computing, Cyber Security, Compliance Management, Enterprise Architecture, IT Support, and CSfC. If you are passionate about making a difference and thrive in a dynamic and collaborative environment, we invite you to apply to join our team.

Equal Opportunity Employer/Veterans/Disabled