Information Systems Security Engineer (ISSE)

Support the NGA mission as an Information Systems Security Engineer focused on engineering, implementing, and evaluating cloud security controls under formal governance and authorization requirements.

Key Responsibilities

• Engineer, implement, and assess security controls for cloud-hosted information systems aligned to RMF, ICD 503, and NIST guidance
• Support agency assessment and authorization (A&A) activities by producing and maintaining required security documentation and evidence
• Apply security engineering across the system lifecycle, including requirements analysis, architecture and design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition
• Translate security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs
• Develop and maintain A&A artifacts such as:
  • System Security Plans
  • Control Implementation Statements
  • Architecture diagrams
  • Security assessment plans and procedures
  • POA&Ms
  • Continuous-monitoring plans
  • Evidence packages
• Assess control implementation and effectiveness, then:
  • Identify security gaps and residual risk
  • Recommend remediation
  • Track corrective actions to closure with technical teams and stakeholders
• Secure cloud and hybrid environments using Zero Trust concepts and practices such as least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration
• Collaborate with cloud, network, application, database, cybersecurity, Oracle, and Government stakeholders; communicate security risks, decisions, and compliance status clearly
• Create and support security deliverables including security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings

Security Domains You Will Work In

• Identity, network, compute, storage, database, logging, monitoring
• Encryption, secrets management, and privileged-access capabilities

Required Qualifications

• Active TS/SCI with CI poly
• Demonstrated experience engineering, implementing, and assessing security controls for cloud-hosted systems per RMF, ICD 503, NIST, and A&A processes
• Proven hands-on experience securing Cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities
• Experience converting security requirements, architectures, data flows, and mission use cases into implementable technical controls and documented security designs
• Experience developing and maintaining A&A artifacts (system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages)
• Ability to assess control implementation/effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure with technical teams and stakeholders
• Experience applying Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices to cloud and hybrid architectures
• Experience performing security engineering across the system lifecycle including requirements analysis, architecture/design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition
• Ability to collaborate effectively and communicate technical security risks, decisions, and compliance status clearly, including strong written and verbal communication
• Strong written and verbal communication skills to produce security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings

Preferred Qualifications

• Associate- or Professional-level cloud certification in Security, Architecting, Networking, or Cloud Operations
• Experience supporting classified, Intelligence Community, Government, or other highly regulated systems with TS/SCI security requirements
• Experience with vulnerability management, configuration compliance, SIEM, SOAR, endpoint security, and cloud security posture management tools/processes
• Experience with infrastructure as code and automated security configuration, including Terraform, OCI Resource Manager, Ansible, APIs, or scripting
• Experience supporting security assessments, authorization decisions, control validation, audit readiness, and continuous monitoring activities in an agency environment

Technologies

• RMF, ICD 503, NIST, Zero Trust
• Terraform, OCI Resource Manager, Ansible
• SIEM, SOAR
• Oracle

Location & Clearance

• Reston, VA (onsite)
• Active TS/SCI with CI poly required

Salary

• USD 130,000 - 155,000 per year

Benefits

• Health/Dental/Vision
• 401(k)
• Paid Time Off
• STD/LTD/Life Insurance/Voluntary Life Insurance
• Stipends
• Referral Bonuses

What You Can Expect

• Recognition for great achievements through service anniversaries, spot awards, and employee referral bonuses
• Join a growing organization of IT engineering professionals with experience actively developing technology in the Intelligence community
• Expected salary range in the Washington, DC metropolitan area is $130,000-$155,000; final compensation varies by experience, education, geographic location, and contractual requirements (not a guarantee)
• Benefits include Health/Dental/Vision, 401(k), Paid Time Off, STD/LTD/Life Insurance/Voluntary Life Insurance, Stipends, Referral Bonuses, and more