Information Systems Security Engineer

ECS Corporate Services; Fort Meade (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

Everforth ECS in Fort Meade, MD seeks an Information Systems Security Engineer to lead security architecture hardening, vulnerability mitigation, and RMF accreditation for multi-tenant systems in a CIE/MPE environment.

You will define, implement, and validate technical security controls across hybrid compute infrastructure (VMs, containers, VDI). Engage with FVEY coalition partners, ISSMs/ISSOs, and defense personnel to ensure strict adherence to zero-trust and DoD baselines.

Qualifications

• U.S. Citizen and active security clearance (Secret).
• Bachelor’s degree with 5+ years in cybersecurity engineering or a Master’s with 3+ years.
• DoD 8570/8140 Baseline: IAT III or IAM II/III certification.
• Hands-on hardening and auditing RHEL (DISA STIGs) and Windows servers.
• Experience securing VMware ESXi/vCenter/vSAN and enterprise VDI.
• Familiar with ACAS/Nessus and CVE lifecycle, vulnerability remediation.
• Strong problem solving and communication across diverse stakeholders.

Responsibilities

• Lead security architecture hardening and RMF accreditation tasks.
• Assess and mitigate vulnerabilities across hybrid compute environments.
• Ensure data flows and boundary enforcement meet DoD baselines.
• Collaborate with FVEY partners, systems architects, and ISSMs/ISSOs.
• Prepare SSPs, SARs, and ICDs with engineering teams.

Skills

Security clearance

IAT III / IAM II/III

Vulnerability management

Zero-trust architecture

Strong communication

Education

Bachelor's degree + 5+ years cybersecurity

Master's degree + 3+ years cybersecurity

Tools

DISA STIGs

SCAP tools

OpenSCAP

SELinux

VMware ESXi/vCenter/vSAN

VDI security

Job description

Everforth ECS is seeking an Information Systems Security Engineer to work in our Fort Meade, MD office. The Information Systems Security Engineer will lead security architecture hardening, vulnerability mitigation, and continuous accreditation for multi-tenant systems operating within a Combined Information Environment (CIE) and Mission Partner Environment (MPE). In this role, you will be responsible for defining, implementing, and validating technical security controls across hybrid compute infrastructure composed of enterprise virtual machines, container orchestration clusters, and virtual desktop delivery pipelines. You will interface directly with Five Eyes (FVEY) coalition partners, systems architects, ISSMs/ISSOs, and operational defense personnel to ensure that all data flows, boundary enforcement points, and identity federation services adhere to rigorous DoD security baselines, zero-trust principles, and Risk Management Framework (RMF) standards.

Primary Responsibilities:

• Multi-Domain & Enclave Boundary Defense: Design, enforce, and audit boundary security mechanisms, network access control policies, and cross-domain controls isolating mission-specific enclaves while facilitating secure multilateral information sharing among FVEY mission partners.
• Virtualization & Hypervisor Security: Apply and validate DISA Security Technical Implementation Guides (STIGs) and hardening benchmarks across enterprise hypervisors (VMware vSphere/ESXi), virtual machines, management planes (vCenter), and software-defined storage backends.
• Linux & Endpoint System Hardening: Maintain baseline configuration compliance and host-based security across Red Hat Enterprise Linux (RHEL) server platforms, Windows infrastructure, and enterprise Virtual Desktop Infrastructure (VDI) (VMware Horizon / Citrix), mitigating vulnerabilities across shared and non-persistent virtual pools.
• Continuous Monitoring & Vulnerability Management: Execute automated vulnerability scanning (e.g., Trellix, ACAS), analyze Common Vulnerabilities and Exposures (CVEs), generate Plan of Action and Milestones (POA&Ms), and engineer automated or scripted remediation actions across VM and VDI fleets.
• Accreditation & Documentation: Translate complex infrastructure topologies and system data flows into comprehensive RMF accreditation artifacts (System Security Plans [SSPs], Security Assessment Reports [SARs], Interface Control Documents [ICDs]). Collaborate with Systems Architects to evaluate architectural models (Visio / Cameo SysML) for cybersecurity posture and zero-trust compliance.
• Other duties, as assigned.

Salary 120,000-150,000

Qualifications and Requirements

• U.S. Citizen.
• Active Secret security clearance.
• Bachelor's degree with 5+ years of progressive experience in cybersecurity engineering, systems security, or security architecture (Mid to Senior level). Alternatively, a Master's degree with 3+ years of experience.
• DoD 8570/8140 Baseline: Active IAT Level III or IAM Level II/III certification (e.g., CISSP, CASP+ CE, CISM, or equivalent).
• Linux & Server Security: Strong hands-on experience hardening and auditing Red Hat Enterprise Linux (RHEL) platforms via DISA STIGs, SCAP tools, OpenSCAP, and SELinux enforcement.
• Virtualization & VDI Security: Practical experience securing virtualized infrastructure (VMware ESXi, vCenter, vSAN) and enterprise VDI deployments supporting multi-classification or multi-tenant desktop access.
• Container Security Concepts: Working knowledge of securing containerized environments and Kubernetes (K8s) deployments (runtime security, image scanning, network policies, RBAC, and secrets management).
• Vulnerability Analysis: Demonstrated expertise with ACAS/Nessus, STIG Viewer, and CVE lifecycle management (triage, exploitation risk analysis, and patch remediation).
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).