ISSE (Hybrid) - 29463

Enlighten, honored as a Top Workplace from USA Today, is a leader in big data solution development and deployment, with expertise in cloud-based services, software and systems engineering, cyber capabilities, and data science. We provide continued innovation and proactivity in meeting our customers’ greatest challenges through a hybrid work approach that balances collaboration and flexibility.

About the role

The Information Systems Security Engineer (ISSE) will perform system or network designs that encompass multiple enclaves, including those with differing data protection/classification requirements. The candidate should understand distributed architectures and cloud-based systems for big data applications and be willing to work a hybrid schedule with flexibility to accommodate changes as needed.

Responsibilities

• Create, review, and edit authorization documentation for completeness and accuracy in accordance with federal and DoD policy.
• Implement DoD Risk Management Framework (RMF) system accreditation processes.
• Assess use case and operational risk of integrated open source, GOTS, and COTS software components.
• Use vulnerability management systems, automated security scanning tools, and system accreditation record systems.
• Interpret and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Follow established processes where applicable and establish defensible processes where none are prescribed.
• Provide security planning, assessment, risk analysis, and risk management support.
• Recommend system-level solutions to resolve security requirements and guide development teams in meeting security posture requirements.
• Support the enforcement of trusted relationships among external systems and architectures.
• Apply knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments.
• Collaborate with diverse audiences to facilitate information exchanges and complete work.
• Navigate workflows, upload artifacts, and manage POA&Ms in eMASS, Xacta, or equivalent RMF system of record.

Requirements

• Active Secret U.S. Government Security Clearance (must maintain); U.S. Citizenship required.
• 9+ years of experience as an ISSE with large multi-tiered programs and a Bachelor’s in a related field; OR 7 years relevant experience with a Master’s in a related field; OR High School Diploma or equivalent and 13 years relevant experience.
• Experience implementing DoD system accreditation processes (DIACAP acceptable, RMF preferred).
• Working knowledge of TCP/IP suite of protocols and services, computer architectures, and network topologies.
• Understanding of NIST SP 800-53 framework, control inheritance, and artifact generation.
• DoD 8140 compliance with IAT Level II (SSCP, Security+, CCNA-Security, or GSEC certification).
• Experience with DISA STIGs and SRGs, vulnerability management systems, mitigation and compliance processes, and reviewing results from automated security scanning tools.
• Ability to work independently and as part of a team.
• Must work in a hybrid environment, averaging 1-2 days per week at the San Antonio, TX office with flexibility to adapt to schedule changes.

Preferred Qualifications

• CISSP-ISSEP certification.
• Experience with BASH, Kubernetes, Visio/draw.io, RHEL, and AWS Cloud.

Benefits

• 100% paid employee premium for healthcare, vision, and dental plans.
• 10% 401k benefit.
• Generous PTO + 10 paid holidays.
• Education and training allowances.

Pay

Anticipated salary range: $112,075.00 - $160,000.00. The range is based on role location, expectations, and responsibilities, with final offers considering factors such as function, internal equity, education, training, work experience, certifications, and key skills.

Schedule

Hybrid work environment, averaging 1-2 days per week in the San Antonio, TX office. Flexibility is required to accommodate schedule changes as needed.