Information Systems Security Engineer (ISSE)

LMI Consulting, LLC; United States; Remoto; USD 92.000 - 158.000; Tempo pieno

Descrizione del lavoro

LMI is seeking an Information Systems Security Engineer (ISSE) to design, implement, and validate security controls for AWS infrastructure and mission applications supporting Department of War mission partners. This remote role requires an active Secret clearance and involves threat modeling, automated security, and RMF/ATO activities.

You will work with the ISSM/ISSO, engineers, and operations teams to ensure secure configurations, monitoring, and evidence collection in cloud and on‑prem

Competenze

• Active Secret clearance and ability to obtain Top Secret if required by assignment.
• 5+ years of relevant experience in systems security engineering, cybersecurity engineering, cloud security, or related field.
• Hands-on experience implementing, troubleshooting, and validating security controls; policy review alone does not satisfy.
• Experience engineering or securing DoD information systems; DoDIN connectivity experience preferred.
• Hands-on experience with AWS workloads and security controls; AWS certification or coursework alone does not satisfy requirement.
• Practical experience with IAM, VPC, security groups, encryption, logging/monitoring (CloudTrail, CloudWatch).
• Experience hardening Linux systems and containerized workloads; working knowledge of Kubernetes controls.
• Scripting, IaC, automation tools, source control, and CI/CD pipelines.

Mansioni

• Translate mission needs into system architectures, control implementations, and test criteria.
• Perform threat modeling and security design reviews; identify risk before deployment.
• Engineer security controls for AWS, Linux, containers, Kubernetes, and services; coordinate with system owners.
• Configure and validate IAM, least-privilege, network segmentation, encryption, and audit logging.
• Apply STIGs and baselines; test changes for security effectiveness and mission impact.
• Integrate security checks into CI/CD pipelines across code, deps, containers, and infra config.
• Use scripting and IaC to deploy repeatable controls, detect drift, and collect evidence.
• Analyze vulnerability findings; remediate and retest; propose compensating controls when needed.
• Develop and execute security verification tests; support authorization assessments and investigations.
• Produce RMF-related artifacts and ATO package evidence.
• Coordinate remediation with ISSO/ISSM; document residual risks for government decisions.

Conoscenze

Collaborative

Technical writing

Independent work

Strumenti

AWS IAM

Amazon VPC

Kubernetes security

Terraform

Ansible

GitLab

Helm

CI/CD tooling

Vulnerability scanning

Descrizione del lavoro

Information Systems Security Engineer (ISSE)

LMI is seeking an Information System Security Engineer (ISSE) to design, implement, and validate security controls for Amazon Web Services (AWS) infrastructure and mission applications supporting Department of War mission partners. The ISSE will engineer secure solutions across development, deployment, and operations.

This hands‑on role focuses on security architecture, hardening, AWS cloud and container security, automation, vulnerability remediation, and technical testing. The ISSE will work with engineers, the Information System Security Manager (ISSM), and the Information System Security Officer (ISSO) to implement controls and provide evidence supporting authorization and continuous monitoring.

This remote position requires an active Secret security clearance. Periodic travel may be required for integration, assessments, customer meetings, and access to approved facilities. All classified work must be performed in approved facilities.

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial‑grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors, helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

Responsibilities

• Translate mission needs and security requirements into system architectures, control implementations, secure configurations, and testable acceptance criteria.
• Perform threat modeling and security design reviews; identify trust boundaries, attack surfaces, data flows, dependencies, and technical risks before deployment.
• Engineer and implement security controls for AWS infrastructure, Linux systems, containers, Kubernetes, application interfaces, and supporting services in coordination with system owners.
• Configure and validate identity and access controls, least‑privilege permissions, network segmentation, encryption, certificates, secrets management, audit logging, and security monitoring.
• Apply Defense Information Systems Agency Security Technical Implementation Guides (STIGs) and approved hardening baselines; test changes for security effectiveness and mission impact.
• Integrate security scanning and checks into continuous integration and continuous delivery pipelines, including code, dependency, container‑image, secrets, and infrastructure‑configuration checks.
• Use scripting, infrastructure as code, and configuration automation to deploy repeatable security controls, detect configuration drift, and collect technical evidence.
• Analyze vulnerability findings, validate applicability, implement fixes, and retest remediation; propose compensating controls for authorized review when immediate correction is not feasible.
• Develop and execute security verification tests, support authorized assessments, and troubleshoot issues involving application, network, cloud, identity, and container security controls.
• Produce security diagrams, configuration baselines, control implementation details, and test evidence supporting Risk Management Framework (RMF) activities and Authority to Operate (ATO) packages.
• Coordinate technical remediation and closure evidence with the ISSO and ISSM; document residual risks and recommendations for government risk decisions without independently accepting risk.
• Assess proposed system changes, maintain engineering documentation and runbooks, and support incident investigation, recovery, and corrective actions with responsible operations teams.

Qualifications

Required Qualifications:

• Active Secret security clearance, with the ability to obtain and maintain Top Secret if required by the assignment.
• Minimum of five years of relevant experience in systems security engineering, cybersecurity engineering, cloud security, secure platform engineering, or a related technical field.
• Hands‑on experience implementing, troubleshooting, and validating security controls. Policy review or compliance documentation experience alone does not satisfy this requirement.
• Experience engineering or securing Department of Defense (DoD) information systems, including systems operating on or connected to the Department of Defense Information Network (DODIN).
• Demonstrated hands‑on professional experience implementing, securing, operating, and troubleshooting AWS workloads. Candidates must be able to describe AWS environments they supported, security controls they personally implemented, and remediation they validated. AWS certification or coursework alone, or experience limited to other cloud providers, does not satisfy this requirement.
• Practical experience with AWS Identity and Access Management (IAM), Amazon Virtual Private Cloud (VPC), security groups, compute and storage security, encryption, and AWS logging and monitoring, including AWS CloudTrail and Amazon CloudWatch.
• Experience hardening and troubleshooting Linux systems and containerized workloads, with working knowledge of Kubernetes security controls.
• Experience using scripting, infrastructure as code, or configuration‑management tools to automate security tasks, and working with source control and software delivery pipelines.
• Working knowledge of TCP/IP networking, routing, firewalls, network segmentation, secure application connectivity, certificates, encryption, and identity and access management.
• Experience applying RMF requirements, NIST SP 800‑53 controls, STIGs, vulnerability scanning, and remediation practices to technical implementations and authorization evidence.
• Current relevant cybersecurity certification and ability to meet applicable contractual workforce qualifications, including DoD 8140 work‑role requirements where applicable.
• Strong technical writing, troubleshooting, and coordination skills; ability to work independently with distributed engineering teams and support periodic travel. A college degree is not required.

Desired Qualifications:

• Experience securing AWS GovCloud environments or Amazon Elastic Kubernetes Service (EKS), including workloads supporting DoD Impact Level 4, 5, or 6.
• Experience with Terraform, Ansible, GitLab, Helm, policy as code, hardened container images, software bills of materials, artifact signing, or automated security evidence collection.
• Experience engineering Zero Trust controls, Common Access Card authentication, DoD public key infrastructure integration, or secure interfaces between approved mission environments.
• Experience supporting eMASS or another government authorization system through engineering artifacts, control implementation details, assessment responses, and remediation evidence.
• Experience supporting Special Operations Forces, combatant commands, mission software, AI‑enabled platforms, or robotics and autonomous‑system programs.
• CISSP, ISSEP, CCSP, Certified Kubernetes Security Specialist, cloud security, or another relevant advanced technical certification.
• Bachelor's or master's degree in cybersecurity, computer science, information systems, engineering, or a related discipline.

The target salary range for this position is $92,075 - $158,138.

The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.

#LI-SH1

Applicants must meet eligibility requirements for a U.S. Government security clearance. Only US Citizens are eligible for a security clearance. For this position, LMI will only consider applicants with security clearances or applicants who are eligible for security clearances, due to the nature of the work.

Job Locations

US-Remote

LMI is an Equal Opportunity Employer

LMI is committed to the fair treatment of all and to our policy of providing applicants and employees with equal employment opportunities. LMI recruits, hires, trains, and promotes people without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, disability, age, protected veteran status, citizenship status, genetic information, or any other characteristic protected by applicable federal, state, or local law. If you are a person with a disability needing assistance with the application process, please contact [e-mail]

Colorado Residents: In any materials you submit, you may redact or remove age‑identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.