Information Systems Security Engineer 3 (FORECASTED)

Columbia Technology Partners, Inc; Annapolis (MD); On-site; USD 150,000 - 190,000; Full time

Job summary

Columbia Technology Partners, Inc. is seeking an Information Systems Security Engineer (ISSE) contingent on contract award.

The ISSE will conduct security assessments, validate requirements, and design IA/security solutions for multi-enclave environments, supporting architects and developers in applying consistent IA policies to secure systems. The role requires 20 years of ISSE experience, a Bachelor's degree in a related field, DoD 8570 IASAE Level 3 compliance, and both ISSEP and CISSP

Qualifications

• Twenty (20) years of ISSE experience
• Bachelor's degree in a related field; DoD 8570 IASAE Level 3 compliance; ISSEP and CISSP certifications

Responsibilities

• Perform or review technical security assessments to identify vulnerabilities and ensure IA compliance.
• Validate, verify, and define system security requirements and designs.
• Design, develop, implement, and integrate IA/security systems and components across networked and multi-enclave environments.
• Embed IA into systems deployed to operational environments.
• Assist architects and developers with applying appropriate information security functionality.
• Support security authorization activities under NSA/CSS NISCAP, DoD RMF, NIST RMF.

Education

Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline

DoD 8570 IASAE Level 3 compliance

ISSEP certification

CISSP certification

Master's degree substitution for two years of experience

Four additional years ISSE experience substituted for bachelor's degree

Job description

**This Position is Contingent on Contract Award**

Description:

The Information Systems Security Engineer (ISSE) conducts and reviews technical security assessments of computing environments to identify vulnerabilities, ensure compliance with Information Assurance (IA) standards, and recommend mitigation strategies. The ISSE validates and verifies security requirements and designs, integrating security capabilities into systems, networks, and multi-enclave environments. This role supports architects and developers in applying consistent security policies, builds secure system architectures, and ensures trusted relationships across external systems. The ISSE contributes to security planning, risk analysis, risk management, and certification activities across the system lifecycle, applying expertise in IA principles, cryptography, authentication, authorization, intrusion detection, contingency planning, configuration management, auditing, and security testing. The role also supports security authorization processes compliant with NSA/CSS NISCAP, DoD RMF, NIST RMF, and related security engineering business practices.

Key Responsibilities:

• Perform or review technical security assessments to identify vulnerabilities and ensure IA compliance.
• Validate, verify, and define system security requirements and designs.
• Design, develop, implement, and integrate IA/security systems and components across networked and multi-enclave environments.
• Embed IA into systems deployed to operational environments.
• Assist architects and developers with applying appropriate information security functionality.
• Support the development and maintenance of secure system architectures.
• Enforce trusted relationships among internal and external systems and architectures.
• Assess and mitigate security threats and risks throughout the program lifecycle.
• Contribute to security planning, assessments, risk analysis, and risk management activities.
• Review Certification and Accreditation (C&A) documentation for completeness and compliance.
• Apply expertise in security engineering domains, including:
  • System security design
  • Engineering lifecycle processes
  • Cross-domain solutions
  • COTS/GOTS cryptography
  • Identification, authentication, authorization
  • Risk management
  • Intrusion detection
  • Contingency and incident handling
  • Configuration and change management
  • Auditing
  • IA principles (confidentiality, integrity, non‑repudiation, availability, access control)
  • Security testing
• Support security authorization activities under NSA/CSS NISCAP, DoD RMF, NIST RMF, and related processes.
• Serve as a security engineering representative on engineering teams for secure system, network, and enclave design and integration.
• Act as the primary security engineering representative for secure architecture and system integration efforts.
• Apply IA policies, procedures, and workforce structures to secure environment design.
• Interact with customers and project team members.
• Support enforcement of trusted external system relationships on behalf of the Government.
• Identify security requirements for handling Government data.
• Design system or network architectures spanning multiple enclaves with differing classification requirements.
• Recommend system‑level solutions to satisfy security requirements.
• Provide expert guidance and evaluate work products of other security engineers.
• Advocate for and recommend improvements to IA policy.
• Collaborate with customers, IT staff, and senior leadership to achieve IA objectives.
• Ensure secure architecture and design for information systems, including programs of record and special‑purpose environments with platform IT interconnectivity.

Qualifications:

• Required Experience:
  • Twenty (20) years as an ISSE on programs of similar scope, type, and complexity.
• Required Education & Certifications:
  • Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline.
  • DoD 8570 IASAE Level 3 compliance.
  • Both ISSEP and CISSP certifications.
• Substitutions:
  • A Master's degree in a related field may substitute for two (2) years of experience (requires 18 total years).
  • Four (4) additional years of ISSE experience may substitute for a bachelor's degree.

Requirements:

• U.S. Citizenship is required for all applicants. CTP is an equal opportunity employer and abides by applicable employment laws and regulations. All applicants and employees are subject to random drug testing in accordance with Executive Order 12564. Employment is contingent upon successful completion of a security background investigation and polygraph.
• Certification Requirements:
  • DOD 8570 Certification

This position requires an active Security Clearance with appropriate Polygraph.

About us:

Founded in 2007, Columbia Technology Partners is Woman‑Owned, Service‑Disabled Veteran Owned Small Business with a specialization in technology and management consulting committed to solving intricate and sensitive technology issues facing corporations and federal agencies. Since its inception, CTP has been instrumental in the technical design, engineering development, operational deployment, and support of key systems. With a proven track record in information security, project management, systems/network engineering, security risk management, vulnerability assessments, and mobile security implementation; our employees have the experience, expertise, and innovative thinking our customers need for results that exceed expectations. CTP staff have worked closely with both government engineers and management to gather mission requirements, develop the architecture to deliver the needed functionality and assess tools available to meet or exceed the needs of the mission.

At Columbia Technology Partners (CTP), we are united in being the best that we can be as individuals, but our core belief is that we can be better together. Together we will take on each mission with an execution process that authentically represents who we are. Our success relies on our team values, the foundation we built around them, and the Partners we become along the way.

That's why our pay is competitive, our missions are critical, and our benefits represent what matters most to CTP: Our People.

Salary Range Transparency

At Columbia Technology Partners we are