The DISA STIG was my starting point when deploying RHEL6 boxes. I don't believe the STIG for v7 is available yet, but I haven't checked in quite a while.

The CIS Benchmark is also quite extensive, and there is a lot of overlap between the two.