DoD RMF Security Architect & IAM Engineer

VulnU; Washington, Denver, Colorado Springs (District of Columbia, CO, CO); Remote; USD 200,000 - 210,000; Full time

Benefits offered by this job

Medical coverage

Dental & vision

401(k) plan

Equity incentives

Home office stipend

Professional development stipend

Flexible PTO

Parental leave

Remote work options

Referral bonus

Job summary

Second Front Systems is seeking an Information Systems Security Engineer to own security architecture and RMF artifacts for the Game Warden platform and hosted apps. You will design secure-by-design solutions, translate decisions into RMF artifacts, and ensure compliance across AWS/Azure/GCP environments.

This role requires DoD RMF experience, an active clearance, strong IAM expertise (SAML, OIDC, MFA), and a track record of building secure, compliant cloud architectures.

Qualifications

• 5–8 years of hands-on security engineering, cloud security architecture, or information assurance.
• DoD or federal authorization under RMF experience.
• Active U.S. Secret clearance and at least one cloud certification (AWS/Azure/GCP).

Responsibilities

• Architect IAM designs covering federation, MFA, RBAC/ABAC, and privileged access.
• Produce authorization boundary diagrams, network diagrams, and data-flow maps for CUI data.
• Translate engineering decisions into RMF artifacts ( SSPs, control narratives, PPSM ).
• Evaluate designs against NIST 800-53, DISA SRG, STIGs, and FedRAMP requirements.
• Collaborate with ISSMs/ISSOs, assessors, and auth officials during reviews.
• Enforce Zero Trust and IaC guardrails in cloud-native environments.
• Act as SME during assessments and readiness reviews and guide re‑authorization activities.

Skills

Identity & access management

SAML / OIDC

RMF / DoD compliance

Cloud security architecture

Job description

Second Front Systems is seeking an Information Systems Security Engineer to own security architecture and RMF artifacts for the Game Warden platform and hosted apps. You will design secure-by-design solutions, translate decisions into RMF artifacts, and ensure compliance across AWS/Azure/GCP environments.

This role requires DoD RMF experience, an active clearance, strong IAM expertise (SAML, OIDC, MFA), and a track record of building secure, compliant cloud architectures.