Information Systems Security Engineer

Job not on LinkedIn

🔥 9 minutes ago

⛰️ Colorado, Maryland – Remote

⛰️ Colorado – Remote 🦀 Maryland – Remote

💵 $200k - $210k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Second Front Systems

WebsiteLinkedInAll Job Openings

51 - 200 employees

☁️ SaaS

🎖️ Defense

🏛️ Government

SaaS • Defense • Government

Second Front Systems is a public-benefit, venture-backed company that provides mission-critical software solutions primarily to democracies around the world. Their product suite, which includes the 2F Suite, 2F Workshop, 2F Game Warden, and 2F Frontier, simplifies and accelerates the software development and delivery process. The company is trusted by leading software providers and government agencies for its secure DevSecOps solutions, enabling secure software deployment on classified and unclassified networks. Their offerings include tools for secure development, software accreditation, government cloud hosting, and edge deployment, particularly focused on supporting government and defense sectors. Second Front Systems collaborates with partners to make emerging technologies more accessible, accelerating the accreditation and compliance processes and offering solutions that can operate in remote or disconnected environments, such as drones and vehicles.

📋 Description

• Architect identity and access management designs across AWS, Azure, and GCP • Build and maintain authorization boundary, network architecture, and data-flow diagrams • Translate engineering and architecture decisions into RMF artifacts, SSP sections, control narratives, PPSM registrations, and significant change impact analyses • Evaluate designs and new services against NIST 800-53, DISA Cloud Computing SRG, STIGs, and FedRAMP requirements • Govern security and authorization impacts of architecture changes, customer integrations, and new services • Advise ISSMs and ISSOs on significance and re-authorization requirements • Collaborate with Solutions Architects and customer architects during onboarding, design, and change activities • Establish Zero Trust principles, infrastructure-as-code guardrails, and compliance-as-code practices • Serve as technical subject matter expert during assessments, readiness reviews, and audits • Guide SCAs and Authorizing Officials through architecture and identity design

🎯 Requirements

• 5–8 years of hands-on security engineering, cloud security architecture, or information assurance experience • Minimum 4 years designing and securing production workloads in AWS, Azure, or GCP • Minimum 3 years supporting DoD or federal authorizations under RMF • Expert fluency in identity and access management, including SAML, OIDC/OAuth 2.0, MFA, RBAC/ABAC, privileged access management, cloud-native IAM, and DoD PKI/CAC authentication • Extensive hands-on experience architecting and securing AWS, Azure, and/or GCP environments • Experience with VPC/VNet design, cloud IAM and account structure, KMS/HSM, logging and monitoring, GuardDuty, Security Hub, Defender for Cloud, GovCloud, containers, Kubernetes, and CI/CD • Ability to produce architecture, authorization boundary, and data-flow diagrams using Lucidchart, draw.io, or Visio • Strong working knowledge of NIST 800-37, NIST 800-53 Rev. 4/5, eMASS or similar GRC tools • Familiarity with DISA PPSM, CAL, DISA Cloud Computing SRG, STIGs, DoD ICAM policy, and DoD Zero Trust Reference Architecture • Active U.S. Secret security clearance required • DoD 8570/8140 IASAE Level II baseline certification (CISSP, CASP+, CSSLP) required or obtainable within 90 days • At least one professional-level cloud certification required or obtainable within 6 months: AWS Certified Security – Specialty, AZ-500, or Google Professional Cloud Security Engineer • U.S. citizenship required • Must reside in an approved hiring hub: DC/Maryland/Virginia or Denver/Colorado Springs, CO

🏖️ Benefits

• 100% employer-paid medical, dental, and vision coverage for you and your dependents • 401(k) with a 3% company contribution • Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more • Equity incentive plan • New hire technology and home office stipend • Annual professional development stipend • Flexible paid time off, plus all federal holidays • Generous parental leave • Flexible remote work opportunities • Employee referral bonus program • Potential eligibility for discretionary bonuses

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume