Information Systems Security Engineer

Role overview Own security architecture and compliance engineering for a cloud platform and the customer applications it hosts. You’ll work across engineering delivery and federal authorization, translating system designs into defensible security controls and evidence, while helping teams build security into solutions from the outset.

Responsibilities - Design identity and access management across cloud environments, including federation, MFA, role- and attribute-based access, privileged access, and government credential authentication. - Maintain authorization boundary, network, and data-flow diagrams that show trust boundaries and the movement of sensitive information. - Turn architecture decisions into risk management framework (RMF) materials, including system security plan sections, control narratives, registrations, and change impact analyses. - Assess designs and services against applicable federal security requirements and recommend compliant approaches. - Advise security managers and officers on architecture changes, customer integrations, and authorization impacts. - Establish Zero Trust and infrastructure-as-code safeguards, and represent the technical design in assessments, readiness reviews, and audits.

Requirements - 5–8 years in security engineering, cloud security architecture, or information assurance, including at least 4 years securing production cloud workloads and 3 years supporting federal or defense authorizations under RMF. - Deep IAM expertise, including SAML, OIDC/OAuth 2.0, MFA, RBAC/ABAC, privileged access management, cloud IAM, and DoD PKI/CAC. - Hands-on experience securing AWS, Azure, or GCP environments, including networking, encryption and key management, logging, monitoring, and cloud security services. - Ability to create accurate architecture and data-flow diagrams and translate technical designs into control implementations and authorization documentation. - Working knowledge of NIST RMF and NIST 800-53, plus experience with GRC tooling such as eMASS or equivalent. - U.S. citizenship and residence in the DC/Maryland/Virginia or Denver/Colorado Springs hiring areas.

Nice to have - Experience with DISA PPSM, Cloud Computing SRG, STIGs, DoD ICAM, FedRAMP, containers, Kubernetes, or CI/CD security practices.

Benefits and work setup - Full-time role with flexible remote work; candidates must reside in one of the listed hiring hubs. - Benefits include employer-paid medical, dental, and vision coverage, retirement contributions, wellness resources, equity eligibility, home-office and professional-development stipends, flexible paid time off, holidays, and parental leave.