ISSE (Hybrid) - 29506

Enlighten; Columbia (MD); Hybrid; USD 129,000 - 180,000; Full time

Benefits offered by this job

Healthcare benefits

PTO and holidays

Education allowances

Job summary

Enlighten is seeking an Information Systems Security Engineer (ISSE) to design and review system architectures that span multiple enclaves with diverse data protection requirements. The candidate will work with cloud-based big data systems and must be willing to maintain a hybrid schedule, spending 1–2 days weekly in the Columbia, MD office.

The role requires a Secret clearance and 9+ years in ISSE or 7 years with a Master’s.

Qualifications

• Active DoD security clearance (Secret) required.
• 9+ years as ISSE on large multi‑tier programs; or 7+ years with Master’s.
• Experience implementing DoD RMF accreditation processes (DIACAP acceptable).
• Knowledge of TCP/IP, system architectures, and network topologies.
• Familiarity with NIST SP 800-53 controls and RMF artifacts.
• Experience with DISA STIGs/SRGs and vulnerability management tools.
• Ability to work independently and in a team; hybrid work in Columbia, MD.

Responsibilities

• Create, review, and edit authorization documentation per DoD policy.
• Implement RMF processes and system accreditation.
• Assess risk of integrated OSS and COTS/GOTS components.
• Use vulnerability management systems and security scanning tools.
• Coordinate with diverse stakeholders and facilitate information exchanges.
• Apply STIGs and SRGs to maintain security posture.
• Provide risk analysis and security planning support.
• Recommend system‑level security solutions to engineers.

Skills

Secret clearance

RMF experience

DISA STIGs

Vulnerability management

DoD accreditation

NIST SP 800-53

IA policy

Education

Bachelor’s degree in related field

Master’s degree in related field

Tools

eMASS

Xacta

Job description

Enlighten, honored as a Top Workplace from USA Today, is a leader in big data solution development and deployment, with expertise in cloud-based services, software and systems engineering, cyber capabilities, and data science. Enlighten provides continued innovation and proactivity in meeting our customers’ greatest challenges.

We recognize that the most effective environment for your projects doesn’t always look the same. Our hybrid work approach ensures that you can make lasting relationships with your team and collaborate in-person to get the job done—while having the flexibility to work from home when needed to achieve focused results.

Why Enlighten?

At Enlighten, our team’s unwavering work ethic, top talent and celebration of innovative ideas have helped us thrive. We know that our employees are essential to our company’s success, so we seek to take care of you as much as you take care of us.

Here are a few highlights of our benefits package:

• 100% paid employee premium for healthcare, vision and dental plans.
• 10% 401k benefit.
• Generous PTO + 10 paid holidays.
• Education/training allowances.

Anticipated Salary Range: $128,887.00-$180,000.00. The salary range for this role is intended as a good faith estimate based on the role's location, expectations, and responsibilities. When extending an offer, Enlighten takes a variety of factors into consideration which include, but are not limited to, the role's function, internal equity and a candidate's education or training, work experience, certifications and key skills. Occasionally positions/roles may include additional non-recurrent compensation and will be addressed by the recruiter during the interview process.

Job Description

Enlighten is looking for an Information Systems Security Engineer (ISSE). The candidate will perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements. The candidate should understand distributed architectures and cloud-based systems for big data applications. Must be willing to work a hybrid schedule and be flexible to accommodate any schedule changes as needed.

#LI-DS1 #Mid-Senior Level

Essential Job Responsibilities

• Will create, review and edit authorization documentation for completeness and accuracy in accordance with federal and DoD policy.
• Thoroughly understand and be able to implement DoD RMF system accreditation processes.
• Assess use case and operational risk of integrated open source, and GOTS/COTS software components.
• Will use vulnerability management systems, automated security scanning tools, and system accreditation record systems.
• Must be able to grasp new concepts, facilitate information exchanges for data gathering, and collaborate with diverse audiences.
• Must be able to interpret and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Will follow established processes where applicable, and establish and execute defensible processes where none are prescribed.
• Provide security planning, assessment, risk analysis, and risk management support.
• Recommend system-level solutions to resolve security requirements and guide the development team in meeting the security posture requirements.
• Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
• Must apply existing knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments.
• Must be able to interact well with others to complete work.
• Other duties as assigned.

Minimum Qualifications

• Clearance Requirement: Must currently have and maintain an active Secret U.S. Government Security Clearance; U.S. Citizenship required.
• 9+ years of experience as an ISSE with large multi-tiered programs and Bachelors in related field; OR 7 years relevant experience with Masters in related field; OR High School Diploma or equivalent and 13 years relevant experience.
• Experience implementing DoD system accreditation processes (DIACAP acceptable and RMF preferred).
• A working knowledge of TCP/IP suite of protocols and services, computer architectures, and network topologies is required.
• An understanding of the underlying framework, control inheritance, and artifact generation utilizing the NIST SP 800-53.
• DoD 8140 compliance with IAT Level II (SSCP, Security+, CCNA-Security, or GSEC certification).
• Experience with DISA STIGs and SRGs, vulnerability management systems, mitigation and compliance processes, and reviewing results from automated security scanning tools.
• The ability to work independently and as part of a team is needed.
• Prior hands-on experience navigating workflows, uploading artifacts, managing POA&Ms in eMASS & Xacta or equivalent RMF system of record.
• Must be able to work in a hybrid environment, spending an average of 1-2 days per week at our Columbia, MD office. Flexibility is essential to adapt to schedule changes as needed.

Preferred Requirements

• CISSP-ISSEP is highly desired
• BASH
• Kubernetes
• Visio/draw.io
• RHEL
• AWS Cloud

We have many more additional great benefits/perks that you can find on our website at www.enlighten.com.