Hybrid ISSE - DoD RMF Security Architect (Fort Meade area)

The Newberry Group; Chambersburg (Franklin County); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Medical coverage

Paid time off

Telecommuting if available

Retirement plan

Job summary

The Newberry Group seeks an experienced ISSE to support a DISA customer. You will serve as a dedicated cybersecurity engineering consultant, providing RMF guidance and threat-informed solutions across the SDLC for on-premises, cloud, and modernizing systems.

The role requires DoD Top Secret clearance, 10+ years of related experience, and the ability to work a hybrid onsite schedule near Fort Meade or Chambersburg. You will mentor ISSMs/ISSOs and present findings to leadership.

Qualifications

• Bachelor’s degree or equivalent professional experience.
• 10+ years of related experience.
• DoD 8140 Work Role 652 - Security Architect Certification requirement (must have at least one): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
• Must have and maintain a current DoD Top Secret clearance.
• Must reside within commutable distance of Fort Meade, MD or Chambersburg, PA for hybrid onsite schedule (4 days onsite weekly).
• Expert-level knowledge of RMF and NIST SP 800-37.
• Expert-level knowledge of NIST SP 800-53 security and privacy controls.
• Strong security architecture and systems-security engineering experience.
• Practical experience applying DoD STIGs, SRGs, and PPSM requirements.
• Experience converting compliance requirements into practical engineering solutions.
• Hands-on engineering/configuration experience with enterprise security technologies, including:
• SIEM platforms such as Splunk or Elastic.
• Vulnerability scanners such as ACAS/Nessus.
• Endpoint Detection and Response (EDR) technologies.

Responsibilities

• Serve as embedded security engineering expert for Mission Partners, ISSMs, ISSOs, system owners, architects, and development teams.
• Provide security engineering support throughout the SDLC, including requirements gathering, design reviews, sprint planning, modernization, implementation, and production.
• Translate RMF, NIST SP 800-53, DoD cybersecurity policy, and other governance requirements into actionable, threat-informed engineering solutions.
• Conduct in-depth security architecture and design reviews for new and existing systems.
• Analyze network architectures, cloud-native architectures, applications, APIs, microservices, containers, serverless functions, interfaces, and data flows to identify security weaknesses.
• Collaborate with architects and developers to identify achievable security controls and reduce compliance friction before formal assessment.
• Engineer and document vulnerability mitigation strategies and provide technical consultation supporting POA&M corrective actions.
• Develop solutions that reduce system attack surface and improve resiliency without unnecessarily compromising mission capability.
• Translate security requirements into specific technical implementation activities such as MFA, database encryption, secure network zoning, and related controls.
• Apply DoD STIGs, SRGs, and PPSM guidance to system engineering activities.
• Use security telemetry and findings from SIEM, vulnerability scanning, and EDR technologies to recommend architectural and engineering improvements.
• Provide technical mentorship and guidance to ISSMs, ISSOs, developers, and system owners.
• Present cybersecurity risks, architectural findings, mitigation strategies, and recommendations to technical personnel and Government leadership.
• Document customer interactions, systems supported, issues addressed, and technical recommendations as required.

Skills

RMF knowledge

NIST 800-53

NIST 800-37

Security architecture

DoD STIGs

Threat modeling

RMF guidance

Education

Bachelor’s degree or equivalent

Tools

Splunk

Elastic

ACAS

Nessus

EDR

Job description

The Newberry Group seeks an experienced ISSE to support a DISA customer. You will serve as a dedicated cybersecurity engineering consultant, providing RMF guidance and threat-informed solutions across the SDLC for on-premises, cloud, and modernizing systems.

The role requires DoD Top Secret clearance, 10+ years of related experience, and the ability to work a hybrid onsite schedule near Fort Meade or Chambersburg. You will mentor ISSMs/ISSOs and present findings to leadership.