DoD RMF & Zero-Trust IAM Security Engineer

Second Front Systems; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Second Front Systems is seeking an Information Systems Security Engineer to strengthen our security-first approach for the Game Warden platform and hosted customer apps. You will own security architecture across identity, access management, and RMF artifacts, collaborating with ISSMs, ISSOs, assessors, and engineers to ensure DoD authorization readiness.

Ideal candidates design secure-by-design solutions, translate architecture into SSPs, and enforce zero-trust principles and compliance-as-code

Qualifications

• 5-8 years hands-on security engineering or cloud security architecture.
• Experience securing production workloads in AWS/Azure/GCP and RMF DoD authorization.

Responsibilities

• Architect identity and access management designs across federation, MFA, RBAC/ABAC, and DoD PKI/CAC.
• Build authorization boundary diagrams, network diagrams, and data-flow diagrams for CUI and sensitive data.
• Translate decisions into RMF artifacts: SSP sections, control narratives, PPSM registrations, change impact analyses.
• Evaluate designs against NIST 800-53, DISA CC SRG, STIGs, and FedRAMP; recommend compliant alternatives.
• Govern security impact of architecture changes and new services; advise ISSMs and ISSOs on re-authorization needs.
• Collaborate with Solutions Architects and customer teams to embed security and authorization from onboarding.
• Establish Zero Trust, IaC guardrails, and compliance-as-code to enforce controls in the cloud.
• Serve as SME during assessments, readiness reviews, and audits.

Skills

Security engineering

Cloud security

RMF DoD

Zero Trust

Job description

Second Front Systems is seeking an Information Systems Security Engineer to strengthen our security-first approach for the Game Warden platform and hosted customer apps. You will own security architecture across identity, access management, and RMF artifacts, collaborating with ISSMs, ISSOs, assessors, and engineers to ensure DoD authorization readiness.

Ideal candidates design secure-by-design solutions, translate architecture into SSPs, and enforce zero-trust principles and compliance-as-code