Application Security Engineer

Application Security Engineer role supporting national security missions by delivering application security capabilities on enterprise cloud platforms.

Responsibilities

• Support application security capabilities aligned to DoD enterprise architecture
• Design, implement, and administer F5 BIG-IP for security and traffic management needs
• Deploy and manage inline break-and-inspect solutions, including reverse web proxy and forward web proxy patterns
• Configure, troubleshoot, and maintain TLS and Mutual TLS (mTLS) on proxy systems
• Collaborate with DoD clients and stakeholders to troubleshoot enterprise architecture issues
• Apply cryptography protocol knowledge across TLS, mTLS, hashing algorithms, and Public Key Infrastructure (PKI)

Requirements

• 3+ years supporting DoD enterprise architecture
• 3+ years designing, implementing, and administering F5 BIG-IP
• 3+ years with In-Line Break and Inspect solutions (reverse web proxy and forward web proxy)
• Experience configuring and troubleshooting TLS and Mutual TLS (mTLS) on a proxy
• Experience working with DoD clients and stakeholders to troubleshoot issues in an enterprise architecture
• Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and PKI
• Ability to travel to CONUS and OCONUS locations up to 25% of the time
• Secret clearance
• HS diploma or GED

Technologies

• F5 BIG-IP
• Reverse web proxy, forward web proxy
• TLS, mTLS
• Public Key Infrastructure (PKI), hashing algorithms
• Office 365, Microsoft Teams
• RDP
• Web-based UI
• SSH, CLI
• NIST 800-53
• FIPS
• DoD STIG
• FedRAMP
• Linux, UNIX

Nice to Have

• Experience using Office 365 applications, including collaborating with Teams
• Experience working in DoD Cloud and on-premises cloud environments
• Experience interacting with tools through RDP, web-based UI, SSH, and CLI
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, DoD STIG, and FedRAMP
• Knowledge of Linux or UNIX environments, including navigating and troubleshooting basic OS issues
• Knowledge of networking protocols

Security & Identity

• Selected applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required
• Interview and assessment processes expect candidates to be on camera
• Company may take a photo to verify identity and prevent fraud

Candidate AI Usage Policy

• AI or other tools to assist with responses during interviews (in-person or virtual) are prohibited unless permission is explicitly provided

Work Model

• Onsite: Work will primarily be performed full-time at a customer facility, collaborating directly with colleagues and customers as required
• Employees working virtually are generally expected to have cameras on during meetings

Location & Compensation

• Fort Meade, MD (onsite)
• USD 86,900 - 198,000 per yearly

Commitment to Non-Discrimination

• All qualified applicants receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable federal, state, local, or international law