Information Systems Security Engineer

Job Summary

To design and secure production cloud environments for federal defense missions, the full-time remote Information Systems Security Engineer will collaborate with solutions architects and customer engineering teams, implementing security controls and documentation for DoD authorization.

Key responsibilities:

• Design and secure production workloads across AWS, Azure, and Google Cloud, defining network segmentation and encryption strategies
• Architect identity and access management solutions, integrating DoD PKI and Common Access Card authentication in line with Zero Trust principles
• Translate architecture decisions into Risk Management Framework artifacts and assess designs against NIST and FedRAMP requirements

Required qualifications:

• 5-8 years of experience in security engineering or cloud security architecture, with at least 4 years in production workloads on AWS, Azure, or GCP
• 3 years of experience supporting DoD RMF authorizations, including ATO packages and technical control implementation
• Deep experience with cloud IAM, SAML, OpenID Connect, and DoD PKI/CAC authentication
• Ability to produce architecture and data-flow diagrams using tools like Lucidchart or Visio
• Active Secret security clearance and a DoD IASAE Level II qualifying certification or the ability to obtain one within 90 days