Information Security Engineer - Zero-Trust RMF Architect

ECS; Fort Meade (MD); Vor Ort; USD 120.000 - 150.000; Vollzeit

Zusammenfassung

Everforth ECS seeks an Information Systems Security Engineer to lead security architecture hardening, RMF accreditation, and vulnerability mitigation for multi-tenant environments at Fort Meade, MD.

You will implement technical security controls across hybrid compute – VMs, containers, and VDI pipelines – coordinating with ISSMs/ISSOs and defense personnel to uphold zero-trust and data protection baselines.

Qualifikationen

• U.S. citizen required.
• Active Secret clearance required.
• Bachelor's degree with 5+ years or Master's with 3+ years in cybersecurity engineering/architecture.
• DoD 8570/8140 Baseline: IAT III or IAM II/III certification.

Aufgaben

• Design, enforce, audit boundary security mechanisms and cross-domain controls.
• Apply STIGs and hardening benchmarks to VMware ESXi, vCenter, and VDI environments.
• Harden Linux (RHEL) and Windows server platforms; manage baseline configurations.
• Conduct vulnerability management using ACAS/Nessus; generate POA&Ms and remediations.
• Produce RMF artifacts (SSPs, SARs, ICDs) and support accreditation processes.

Kenntnisse

U.S. Citizen

Active Secret clearance

Security architecture & RMF

DoD 8570/8140 Baseline (IAT III / IAM)

RHEL security hardening

Vulnerability scanning (ACAS/Nessus)

VMware ESXi/vCenter security

VDI security (VMware Horizon / Citrix)

Container security (Kubernetes)

Strong communication

Ausbildung

Bachelor's degree with 5+ years experience

Master's degree with 3+ years experience

Tools

VMware ESXi

vCenter

Kubernetes

OpenSCAP

DISA STIGs

Jobbeschreibung

Everforth ECS seeks an Information Systems Security Engineer to lead security architecture hardening, RMF accreditation, and vulnerability mitigation for multi-tenant environments at Fort Meade, MD.

You will implement technical security controls across hybrid compute – VMs, containers, and VDI pipelines – coordinating with ISSMs/ISSOs and defense personnel to uphold zero-trust and data protection baselines.