ISSE (Hybrid) - 29506

Enlighten, honored as a Top Workplace from USA Today, is a leader in big data solution development and deployment, with expertise in cloud-based services, software and systems engineering, cyber capabilities, and data science. We provide continued innovation and proactivity in meeting our customers’ greatest challenges through a hybrid work approach that balances collaboration and flexibility.

About the role

The Information Systems Security Engineer (ISSE) will perform system or network designs that encompass multiple enclaves, including those with differing data protection/classification requirements. The role requires an understanding of distributed architectures and cloud-based systems for big data applications. A hybrid work schedule is required, with flexibility to accommodate schedule changes as needed.

Responsibilities

• Create, review, and edit authorization documentation for completeness and accuracy in accordance with federal and DoD policy.
• Implement DoD Risk Management Framework (RMF) system accreditation processes.
• Assess use case and operational risk of integrated open source, GOTS, and COTS software components.
• Use vulnerability management systems, automated security scanning tools, and system accreditation record systems.
• Facilitate information exchanges for data gathering and collaborate with diverse audiences.
• Interpret and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Follow established processes where applicable and establish defensible processes where none are prescribed.
• Provide security planning, assessment, risk analysis, and risk management support.
• Recommend system-level solutions to resolve security requirements and guide development teams in meeting security posture requirements.
• Support the enforcement of trusted relationships among external systems and architectures.
• Design, develop, and implement secure networking, computing, and enclave environments using IA policy and procedures.
• Navigate workflows, upload artifacts, and manage POA&Ms in eMASS, Xacta, or equivalent RMF systems of record.
• Other duties as assigned.

Requirements

• Active Secret U.S. Government Security Clearance (must be maintained); U.S. Citizenship required.
• 9+ years of experience as an ISSE with large multi-tiered programs and a Bachelor’s in a related field; OR 7 years relevant experience with a Master’s in a related field; OR High School Diploma or equivalent and 13 years relevant experience.
• Experience implementing DoD system accreditation processes (DIACAP acceptable, RMF preferred).
• Working knowledge of TCP/IP suite of protocols and services, computer architectures, and network topologies.
• Understanding of NIST SP 800-53 framework, control inheritance, and artifact generation.
• DoD 8140 compliance with IAT Level II (SSCP, Security+, CCNA-Security, or GSEC certification).
• Experience with DISA STIGs and SRGs, vulnerability management systems, mitigation and compliance processes, and reviewing results from automated security scanning tools.
• Ability to work independently and as part of a team.
• Hybrid work environment, averaging 1-2 days per week at the Columbia, MD office; flexibility to adapt to schedule changes is essential.

Preferred Qualifications

• CISSP-ISSEP certification.
• Experience with BASH, Kubernetes, Visio/draw.io, RHEL, and AWS Cloud.

Benefits

• 100% paid employee premium for healthcare, vision, and dental plans.
• 10% 401k benefit.
• Generous PTO + 10 paid holidays.
• Education and training allowances.

Pay

Anticipated salary range: $128,887 – $180,000. The range is based on role location, expectations, and responsibilities. Offers consider factors such as role function, internal equity, and a candidate’s education, training, work experience, certifications, and key skills. Occasionally, positions may include additional non-recurrent compensation, discussed during the interview process.