ISSE (Hybrid) - 29506

Enlighten, honored as a Top Workplace from USA Today, is a leader in big data solution development and deployment, with expertise in cloud-based services, software and systems engineering, cyber capabilities, and data science. We provide continued innovation and proactivity in meeting our customers’ greatest challenges through a hybrid work approach that balances collaboration and flexibility.

About the role

The Information Systems Security Engineer (ISSE) will perform system or network designs that encompass multiple enclaves, including those with differing data protection/classification requirements. The role requires an understanding of distributed architectures and cloud-based systems for big data applications. A hybrid work schedule is required, with flexibility to accommodate schedule changes as needed.

Responsibilities

• Create, review, and edit authorization documentation for completeness and accuracy in accordance with federal and DoD policy.
• Implement DoD RMF system accreditation processes.
• Assess use case and operational risk of integrated open source, GOTS, and COTS software components.
• Use vulnerability management systems, automated security scanning tools, and system accreditation record systems.
• Interpret and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Follow established processes where applicable and establish defensible processes where none are prescribed.
• Provide security planning, assessment, risk analysis, and risk management support.
• Recommend system-level solutions to resolve security requirements and guide the development team in meeting security posture requirements.
• Support the enforcement of trusted relationships among external systems and architectures.
• Design, develop, and implement secure networking, computing, and enclave environments using IA policy and procedures.
• Collaborate with diverse audiences and facilitate information exchanges for data gathering.
• Navigate workflows, upload artifacts, and manage POA&Ms in eMASS, Xacta, or equivalent RMF systems of record.
• Other duties as assigned.

Requirements

• Active Secret U.S. Government Security Clearance (must maintain); U.S. Citizenship required.
• 9+ years of experience as an ISSE with large multi-tiered programs and a Bachelor’s in a related field; OR 7 years of relevant experience with a Master’s in a related field; OR High School Diploma or equivalent and 13 years of relevant experience.
• Experience implementing DoD system accreditation processes (DIACAP acceptable, RMF preferred).
• Working knowledge of TCP/IP suite of protocols and services, computer architectures, and network topologies.
• Understanding of NIST SP 800-53 framework, control inheritance, and artifact generation.
• DoD 8140 compliance with IAT Level II (SSCP, Security+, CCNA-Security, or GSEC certification).
• Experience with DISA STIGs and SRGs, vulnerability management systems, mitigation and compliance processes, and reviewing results from automated security scanning tools.
• Ability to work independently and as part of a team.
• Prior hands-on experience with RMF systems of record (e.g., eMASS, Xacta).
• Willingness to work in a hybrid environment, averaging 1-2 days per week at the Columbia, MD office.

Preferred Qualifications

• CISSP-ISSEP certification.
• Experience with BASH, Kubernetes, Visio/draw.io, RHEL, and AWS Cloud.

Benefits

• 100% paid employee premium for healthcare, vision, and dental plans.
• 10% 401k benefit.
• Generous PTO + 10 paid holidays.
• Education and training allowances.

Pay

Anticipated salary range: $128,887 – $180,000. The range is based on role location, expectations, and responsibilities. Final offers consider factors such as function, internal equity, education, training, work experience, certifications, and key skills. Occasionally, roles may include additional non-recurrent compensation, discussed during the interview process.

Schedule

Hybrid work schedule, averaging 1-2 days per week in the Columbia, MD office. Flexibility is required to accommodate schedule changes as needed.