OS Image Factory Engineer

True Zero Technologies, LLC

OS Image Factory Engineer building secure RHEL and Windows images for regulated, government, and Zero Trust environments. Automating CI/CD, hardening, scanning, signing, and artifact lifecycle management.

Posted 8/14/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in OS image engineering for RHEL and Windows, with a strong focus on CI/CD pipeline development, container image management, and security compliance. Proficient in automation tools such as Ansible and EC2 Image Builder, ensuring robust image governance and lifecycle management.

Highest-signal resume keywords

OS Image EngineeringCI/CD Pipeline DevelopmentAnsible Configuration ManagementContainer Image ManagementDISA STIG Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

RHELWindowsEC2 Image BuilderHashiCorp PackerAnsibleOpenSCAPFIPS ComplianceVulnerability ScanningImage SigningInfrastructure-as-Code

Soft Skills

TroubleshootingDocumentationGovernanceCross-Functional Collaboration

Tools & Technologies

AWS GovCloudContainer RegistriesArtifact RepositoriesImage Promotion Workflows

Certifications & Qualifications

RHCERed Hat Certified Specialist in ContainersRed Hat Certified Specialist in Ansible AutomationCKACKADMicrosoft Certified: Windows Server Hybrid Administrator Associate

Industry Keywords

Zero Trust PrinciplesSoftware Supply Chain IntegrityRegulated Cloud EnvironmentsConfiguration ManagementVersion Control

Tech Stack

Tools & technologies

AnsibleAWSCloudCyber SecurityEC2Packer

About the role

Key responsibilities & impact

Design, build, and maintain standardized OS images for RHEL and Windows environments
Develop and manage container image build, validation, promotion, and lifecycle processes
Build automated image pipelines using EC2 Image Builder and/or HashiCorp Packer
Develop and maintain CI/CD pipelines automating image creation, testing, security validation, approval, promotion, and retirement
Use Ansible for configuration management, operating system hardening, software installation, and repeatable image configuration
Integrate vulnerability scanning and security assessment tools into image build and release pipelines
Implement and maintain DISA STIG-hardened configurations and validate compliance using OpenSCAP or equivalent tooling
Produce and maintain FIPS-enabled builds where required
Implement image signing and attestation for Zero Trust software supply chain integrity and verification
Manage image artifacts, versions, metadata, dependencies, and retention policies in approved registries and repositories
Establish lifecycle processes for image creation, testing, release, patching, deprecation, and retirement
Enforce image governance standards, release controls, approval workflows, and configuration baselines
Maintain traceability between source configuration, build pipelines, security results, image versions, and released artifacts
Partner with platform, cloud, cybersecurity, and application teams to meet operational, compliance, and deployment requirements
Develop automated tests for image functionality, configuration, security posture, and release readiness
Maintain technical documentation, build standards, operating procedures, and image-factory governance processes
Continuously improve image build times, reliability, repeatability, security controls, and pipeline automation

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or related technical discipline
Demonstrated experience with OS image engineering for RHEL and Windows platforms
Hands-on experience with container image creation, management, scanning, and lifecycle management
Experience with EC2 Image Builder, HashiCorp Packer, or comparable image automation technologies
Strong experience developing and maintaining CI/CD pipelines for infrastructure or system artifacts
Hands-on experience with Ansible configuration management and automation
Experience integrating vulnerability scanning, compliance validation, and security policy enforcement into automated pipelines
Experience implementing DISA STIG hardening and compliance validation using OpenSCAP or comparable technologies
Understanding of FIPS-enabled operating system and application configurations
Experience implementing image signing, provenance, integrity validation, and attestation within a software supply chain
Experience managing artifact repositories, container registries, image versions, retention policies, and artifact promotion workflows
Strong understanding of configuration management, version control, release management, and infrastructure-as-code practices
Experience operating in AWS GovCloud, government, defense, or other regulated cloud environments is preferred
Familiarity with Zero Trust principles, software supply chain integrity, trusted artifacts, and continuous verification
Strong troubleshooting, documentation, governance, and cross-functional collaboration skills
Preferred certifications: RHCE; Red Hat Certified Specialist in Containers; Red Hat Certified Specialist in Ansible Automation; CKA or CKAD; Microsoft Certified: Windows Server Hybrid Administrator Associate

Benefits

Comp & perks

Competitive salary, paid twice per month
Best in class medical coverage
100% of medical premiums covered by True Zero
Company wide new business incentive programs
Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
3 weeks of PTO starting + 11 Paid Holidays Annually
401k Program with 100% company match on the first 4%
Monthly reimbursement of Cell Phone and Home Internet costs
Paternity/Maternity Leave
Investment in training and certifications to broaden and deepen your technical skills