Senior Technical Lead

Job description

We are seeking an experienced Senior DevSecOps / Security Automation Engineer to design, build, and automate hardened infrastructure baselines and security compliance controls for enterprise deployments. The engineer will be responsible for creating repeatable hardened OVA images for RHEL 8, RHEL 9, and Windows Server 2022 , automating DISA STIG/SRG controls , integrating compliance scanning into deployment workflows, and generating security evidence required to support ATO activities . Key Responsibilities Hardened Base Image Engineering Design, build, and maintain automated pipelines for hardened OVA base images for: RHEL 8 RHEL 9 Windows Server 2022 Develop repeatable image-build processes that provide standardized foundations for component deployments. Apply applicable DISA STIG controls during the image-build process. Generate DISA STIG Viewer CKL compliance artifacts for each image release. Build component-ready OVAs containing required application/component prerequisites where appropriate. Implement image versioning, checksum generation, signing/hashing, and release traceability. Maintain release records covering image versions, STIG releases, CKLs, and approved/known exceptions. Rebuild hardened images based on applicable DISA STIG and OS vendor patch releases as prioritized through the work backlog. Security Controls & Compliance Automation Develop and maintain a STIG Applicability Matrix mapping operating systems and application components to applicable DISA STIGs and SRGs. Identify appropriate DISA SRGs when a product-specific STIG is unavailable. Automate implementation of applicable security controls across operating system and application layers. Develop reusable automation for infrastructure and security configuration, preferably using Ansible and related automation technologies. Automate compliance scans using tools such as SCAP Compliance Checker (SCC) and/or OpenSCAP . Generate CKL evidence for OS and component instances as part of deployment and upgrade workflows. Identify and document STIG/SRG controls that cannot be implemented or that adversely affect application functionality. Document technical justification, mitigation/compensating controls, and recommended POA&M entries for identified exceptions. Develop mechanisms to detect and report configuration drift against approved hardened baselines. Apply CIS Benchmarks as supplemental guidance only where appropriate and approved. Skill Requirements Strong hands-on experience with RHEL 8/9 security hardening Experience with Windows Server 2022 hardening and configuration Strong experience with Ansible and infrastructure/configuration automation Experience building or maintaining VMware OVA/virtual machine images Practical understanding of: DISA STIG DISA SRG STIG Viewer and CKL files SCAP OpenSCAP and/or SCAP Compliance Checker POA&M Security baselines and configuration drift Experience developing automated, repeatable CI/CD or image-build pipelines Experience with scripting and automation using Python, PowerShell, Bash, or equivalent technologies Understanding of version control and automated release management using Git-based workflows Ability to troubleshoot security hardening controls that conflict with OS or application functionality. Preferred Skills Experience supporting environments subject to ATO/security authorization requirements Experience automating security evidence collection and compliance reporting. Experience with application-layer security hardening in addition to OS hardening. Knowledge of CIS Benchmarks and their relationship to organizational security baselines. Experience integrating security validation into CI/CD or deployment pipelines. Experience with enterprise VMware environments and automated VM/image deployment. Other Requirements Looking for U.S. citizens for this role and prefer to work from Fortcollins, USA, but any other locations in USA is also fine. Maximum Salary (US): Minimum Salary (US): Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. Compensation and Benefits A candidate’s pay within the range will depend on their skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider Vimeo YouTube YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider YouTube Advertising Cookies These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies