EngineerJobs.io
← Back to all jobs
teKnoluxion

Information Systems Security Engineer (ISSE)

teKnoluxion
Reston, VA $130k - $155k/yr Full time Posted 19d ago
Cloud Platforms Cyber Security Identity and Access Management Information Security InfoSec Risk Governance Risk Management Security Security Automation Security Clearance Security Compliance Security Information And Event Management Security Monitoring Security Standards
Apply Now

Job Description

Information Systems Security Engineer position supporting NGA mission needs in Reston, VA.

Responsibilities

  • Engineer, implement, and assess security controls for cloud-hosted information systems in alignment with RMF, ICD 503, and NIST guidance
  • Support agency assessment and authorization (A&A) activities for cloud systems, including control implementation and effectiveness review
  • Secure cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged access
  • Translate security requirements, system architecture, data flows, and mission use cases into implementable technical controls and documented security designs
  • Develop and maintain A&A artifacts such as:
    • System security plans
    • Control implementation statements
    • Architecture diagrams
    • Security assessment plans and procedures
    • POA&M documentation
    • Continuous-monitoring plans
    • Evidence packages
  • Evaluate control implementation and performance; identify security gaps and residual risk; recommend remediation and drive corrective actions to closure with technical teams and stakeholders
  • Apply security engineering practices across the system lifecycle, including requirements analysis, architecture/design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition
  • Apply Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices to cloud and hybrid architectures
  • Collaborate with cloud, network, application, database, cybersecurity teams, Oracle, and Government stakeholders
  • Communicate technical security risks, decisions, and compliance status clearly; produce security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings

Requirements

  • Active TS/SCI with CI poly
  • Demonstrated experience engineering, implementing, and assessing security controls for cloud-hosted information systems under RMF, ICD 503, NIST, and agency A&A processes
  • Proven hands-on experience securing Cloud environments spanning:
    • Identity
    • Network
    • Compute
    • Storage
    • Database
    • Logging and monitoring
    • Encryption
    • Secrets management
    • Privileged-access capabilities
  • Experience converting security requirements and mission use cases into technical controls and documented security designs
  • Ability to assess control implementation and effectiveness, identify gaps/residual risk, recommend remediation, and track corrective actions to closure
  • Experience applying Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices in cloud/hybrid architectures
  • Experience performing security engineering across the system lifecycle (requirements, design review, implementation oversight, vulnerability remediation, testing, deployment, operational transition)
  • Strong written and verbal communication, including ability to produce security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings
  • Effective collaboration with cross-functional cloud/network/application/database/cybersecurity stakeholders

Technologies

  • RMF, ICD 503, NIST
  • Zero Trust
  • Terraform
  • OCI Resource Manager
  • Ansible
  • SIEM, SOAR
  • Oracle

Preferred Qualifications

  • Associate- or Professional-level cloud certification in Security, Architect, Networking, or Cloud Operations
  • Experience supporting classified, Intelligence Community, Government, or other highly regulated systems with TS/SCI security requirements
  • Experience with vulnerability-management and configuration-compliance processes and tools, including SIEM, SOAR, endpoint-security, and cloud-security-posture-management
  • Experience with infrastructure as code and automated security configuration (Terraform, OCI Resource Manager, Ansible, APIs, or scripting)
  • Experience supporting security assessments, authorization decisions, control validation, audit readiness, and continuous-monitoring activities in an agency environment

Benefits

  • Health/Dental/Vision
  • 401(k)
  • Paid Time Off
  • STD/LTD/Life Insurance/Voluntary Life Insurance
  • Stipends
  • Referral Bonuses

Compensation

  • USD 130,000 - 155,000 per year
  • Final compensation is based on experience, education, geographic location, and contractual requirements; not a guarantee

Similar Jobs