Security Engineer (St. Louis) with Security Clearance

PLEASE NOTE: This position requires permanent U.S. work authorization. Candidates requiring current or future visa sponsorship, including those on OPT, CPT or H1, are not eligible for this role. This role is not open for staffing partners or corp‑to‑corp candidates. Why WWT? World Wide Technology (WWT) strives to make a new world happen. WWT's work benefits clients and partners as much as it does its people and community across the globe.

Founded in 1990, WWT brings together strategy, deep technical expertise and world-class partnerships to help public and private sector organizations design, build and scale intelligent AI, digital, cybersecurity, cloud and infrastructure solutions. Through its Advanced Technology Center (ATC)-a collaborative ecosystem featuring state-of-the-art hardware and software-WWT enables clients and partners to conceptualize, test and validate innovative technology and then deploy solutions at scale using its global integration and distribution capabilities.

With more than 14,000 team members and over 60 locations globally, WWT's culture-grounded in core values and leadership philosophies-has been recognized by Fortune® and Great Place to Work for its commitment to innovation, trust and creating a great place to work for all. WWT provides products and services to large enterprise, global service provider and public sector clients in up to 130 countries across six continents. Softchoice, a World Wide Technology company, supports commercial and SMB markets in the U.S. and Canada.

Want to work with highly motivated individuals on high-performance teams? Join WWT today! Why Join the Internal WWT IT Team? The Internal WWT IT team designs, builds, secures, and operates the platforms that support WWT's internal applications and engineering teams. Our work enables reliable, scalable, and automated delivery of software and services that support the company's business objectives. You will work on foundational technology that matters: shared platforms, developer tooling, security contr ols, and automation used across WWT IT.

The environment values ownership, collaboration, continuous learning, and practical improvement. Why Join INFOPS Application Development? INFOPS Application Development operates within Internal IT Platform Engineering and focuses on enabling developers. The team builds and operates platforms, workflows, and automation that allow application teams to securely self-service infrastructure, deployments, data services, and integrations.

Our portfolio includes Red Hat OpenShift application environments; shared data and messaging services such as MongoDB, PostgreSQL, Redis, RabbitMQ, and Apache Solr; and delivery capabilities built around GitHub Actions, Codefresh, Argo CD, Helm, GitOps, APIs, and infrastructure-as-code practices. The team is also expanding its service mesh and AI gateway capabilities, creating an opportunity to shape how service-to-service and agent-to-service traffic is secured from the start. This role sits inside the platform team, not outside it.

You will work directly alongside the engineers who build and run these platforms, with the access and context to fix problems at the source and a mandate to make the secure path the easy path for developers. What Will You Be Doing? This Security Engineer will be embedded with the platform engineering team and will focus on strengthening the security of Kubernetes and Red Hat OpenShift platforms and the services running within them.

The role will assess vulnerabilities and platform security posture, drive practical remediation, automate repeatable security activities, and improve security across software-delivery and supply-chain workflows. You will independently execute well-defined work, contribute to approaches for security problems, and own assigned deliverables. You will partner with platform engineers, application teams, and enterprise security functions to translate findings and guidance into actionable remediation plans, durable contr ols, and measurable security improvements.

Platform && Technology Scope You will work primarily with Kubernetes and Red Hat OpenShift environments across a hybrid footprint of on-premises and cloud-connected infrastructure, and with the shared application platforms running within them, including MongoDB, PostgreSQL, Redis, RabbitMQ, and Apache Solr. The delivery ecosystem includes GitHub Actions, Codefresh, Argo CD, GitOps, Helm, APIs, and configuration-as-code practices.

The team uses Wiz, Tenable, and Red Hat Advanced Cluster Security (ACS) for vulnerability management, Kubernetes and container security, compliance, and risk visibility. Experience with these platforms is helpful, but equivalent experience with comparable security technologies is also relevant. This role focuses on security engineering for the platforms the team builds and operates, working in close partnership with the enterprise security teams that lead WWT's broader security program.

Use of approved AI-assisted engineering tools is expected, and there is real room to build with them: automating security analysis, triage, and remediation workflows, and helping shape how the team uses AI and agentic tooling safely. As with any tool, we expect sound judgment, validation of results, and secure data-handling practices.

RESPONSIBILITIES

• Monitor emerging vulnerabilities and regularly assess the security posture of Kubernetes, OpenShift, underlying Linux hosts, container workloads, and shared platform services; identify and prioritize risks and contr ol gaps, and drive assigned remediation through completion.
• Develop automation to continuously assess security posture, streamline vulnerability management, and remediate repeatable, well-understood security issues where appropriate.
• Implement and improve Kubernetes and OpenShift security contr ols, including RBAC, Security Context Constraints (SCCs), Pod Security Admission, network policies and segmentation, ingress and service mesh security (such as mTLS and authorization policies), secrets and certificate management, workload identity, and policy-as-code contr ols.
• Configure, integrate, maintain, and optimize security tools to provide accurate, actionable insight into platform vulnerabilities and risks.
• Evaluate and recommend security tools and technical contr ols that improve vulnerability management, security monitoring, access visibility, and compliance.
• Strengthen DevSecOps and software supply-chain security across CI/CD and GitOps workflows, including vulnerability and secret scanning, dependencies, container images, SBOMs, image provenance, and workflow permissions.
• Partner with platform and application engineers to interpret findings, determine practical remediation approaches that balance security with reliability, developer experience, and business needs, and incorporate security into platform designs and delivery workflows.
• Document security findings, contr ol decisions, remediation approaches, exceptions, standards, and recurring processes, and communicate material risks to technical and non-technical stakeholders.
• Participate in security investigations, incident response, a shared on-call rotation, and scheduled platform maintenance, some of which may occur outside normal business hours.

REQUIRED QUALIFICATIONS

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or an equivalent combination of education, training, and practical experience.
• Three (3) to five (5) years of experience in security engineering, platform security, infrastructure security, DevSecOps, vulnerability management, or a related technical field.
• Hands-on experience securing Kubernetes or containerized platforms, including identity and access, workload security, network contr ols, secrets, images, and secure configuration.
• Experience using vulnerability and security findings to assess risk, prioritize remediation, and improve security posture, including configuring or maintaining the security tools that produce those findings.
• Experience scripting or building automation with Python, PowerShell, Bash, or a similar language.
• Understanding of DevSecOps and secure software-delivery practices, including CI/CD, container images, application dependencies, and software supply-chain risk.
• Ability to troubleshoot technical issues, analyze risk, document findings, and move assigned work to completion with limited direction.
• Strong written and verbal communication skills, sound engineering judgment, and the ability to collaborate effectively with platform engineers, developers, security teams, and compliance partners.

PREFERRED QUALIFICATIONS

• Experience applying Kubernetes security practices in Red Hat OpenShift, including SCCs, operators, and cluster policy.
• Experience with Red Hat Advanced Cluster Security (ACS), Wiz, Tenable, or comparable container security, cloud security, and vulnerability-management platforms.
• Hands-on experience implementing contr ols such as SAST, SCA, secret scanning, SBOM generation, container scanning, image signing, or provenance.
• Ability to read and review code in at least one common language, such as Java, TypeScript, Python, or Go, along with familiarity with common application and API vulnerability classes.
• Experience securing service mesh (such as Istio), ingress, API gateways, or Linux hosts.
• Experience with GitOps, Helm, Ansible, Terraform, Kubernetes operators, or YAML-based pipeline automation.
• Familiarity with security standards and practices such as the OWASP Top 10, OWASP API Security Top 10, NIST Secure Software Development Framework, CIS Benchmarks, SLSA, or MITRE ATT&&CK.
• Relevant security or cloud certifications, such as Security+, CISSP, CCSP, or Certified Kubernetes Security Specialist (CKS).

Location: This is a hybrid role based in St. Louis, MO. Certain states and localities require employers to post a reasonable estimate of salary range. A reasonable estimate