Information Systems Security Engineer (ISSE)

Position Summary

Support the secure deployment and operation of the GEMSTONE platform across classified and unclassified environments, including air-gapped on-premises systems, ensuring systems are hardened, compliant, and accredited while helping evolve GEMSTONE into a secure hybrid cloud/on-prem platform.

Key Responsibilities

• Work closely with developers to integrate security into platform design and deployment workflows
• Ensure systems comply with DoD STIGs, RMF controls, and security accreditation requirements
• Support deployment of a modeling and simulation platform in cloud and on-premises Kubernetes environments with UDS Core
• Support and secure air-gapped deployments, including installation, updates, and sustainment in disconnected environments
• Collaborate with the platform team to design and evolve a hybrid architecture spanning cloud and on-prem systems
• Implement and validate security controls, patching, and vulnerability remediation processes
• Support Authority to Operate (ATO) activities, including documentation, validation, and audit readiness
• Partner with the ISSM to maintain continuous monitoring and compliance posture
• Audit and secure containerized workloads, APIs, and Kubernetes-based services
• Guide implementation of network security, access controls, and boundary protections in classified environments
• Support accreditation and deployment of applications transitioning to higher classification levels
• Participate in security reviews, risk assessments, and incident response activities

Qualifications

• Bachelor's degree in Computer Science or engineering related field
• 5+ years of experience in information system security engineering (ISSE) or software development/engineering
• Strong experience applying DoD STIGs, RMF framework, and security compliance requirements
• Experience supporting ATO processes for classified or government systems
• Experience securing Linux-based systems and hardened environments
• Familiarity with Kubernetes platforms and container security practices
• Experience supporting air-gapped or disconnected system deployments
• Experience securing hybrid cloud and on-premises architectures
• Knowledge of network security principles, including segmentation and access control
• Security+ certification
• Ability to identify and mitigate system vulnerabilities and cyber risks
• Strong collaboration skills to work with developers, platform engineers, and ISSM stakeholders
• Active TS clearance, SCI eligible required

Basic Compensation

$130,000 - $170,000 (Colorado area only)