Mission-Critical ISSE: Secure DoD RMF & Cloud Architect

Akima; Alexandria (VA); On-site; USD 180,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

PTO

Job summary

Akima Data Management (ADM) seeks an Information System Security Engineer (ISSE) to design, engineer, and validate cybersecurity capabilities across DoW OIG information systems. Based in Alexandria, VA, the ISSE will integrate security engineering into the full system lifecycle and ensure secure, resilient operations across the enterprise.

The role requires top-secret clearance with SCI, DoD/NIST/fedRAMP knowledge, and leadership in risk management, vulnerability remediation, and security policy

Qualifications

• Active TOP SECRET with SCI clearance.
• Bachelor’s degree and 5–10 years of relevant experience, or 10+ years in lieu of a degree.
• IAM Level III certification (e.g., CGRC, CASP+ CE, CISSP, CISM) required; IAT Level III preferred.
• Strong understanding of NIST, FISMA, DoD, and organizational cybersecurity engineering frameworks.
• Vulnerability Management and Policy Writing Experience.
• Experience with security architecture, RMF engineering activities, and secure system design.

Responsibilities

• Define, refine, and validate security requirements based on mission objectives, threat assessments, risk analyses, and applicable cybersecurity policies, standards, and frameworks.
• Design and implement secure system architectures, data flows, and engineering solutions aligned with NIST, DoD, FedRAMP, and Zero Trust principles.
• Develop security engineering artifacts, interface control documents, SSPs, and technical documentation supporting RMF authorization and accreditation activities.
• Conduct security architecture reviews, threat modeling, vulnerability assessments, and security impact analyses for on-premises, cloud, and hybrid environments.
• Lead cloud vulnerability management efforts, including vulnerability scanning, assessment, prioritization, remediation tracking, and risk reporting across enterprise cloud platforms.
• Develop, review, and maintain cybersecurity policies, standards, procedures, and implementation guidance to ensure compliance with federal, DoD, and organizational requirements.
• Engineer and implement security controls, secure configurations, STIGs, SRGs, and baseline hardening requirements across systems, applications, cloud services, and networks.
• Perform technical control assessments, security testing, validation activities, and control effectiveness reviews to verify compliance and mitigate risk.
• Analyze security findings, recommend risk-based mitigation strategies, and support POA&M development, remediation management, and closure activities.
• Integrate security requirements throughout the SDLC, ensuring secure coding, configuration management, and deployment practices.
• Conduct security assessments for system upgrades, patches, cloud migrations, integrations, and infrastructure changes to identify and mitigate potential risks.
• Design and support continuous monitoring capabilities, including automated vulnerability scanning, logging, alerting, and security analytics solutions.
• Provide technical support for incident response, forensic investigations, containment, eradication, and recovery operations.
• Assess emerging threats, vulnerabilities, cloud technologies, and adversary tactics to strengthen organizational security posture and resilience.
• Translate complex security engineering requirements into actionable guidance for system administrators, developers, architects, and operational teams.

Skills

Security engineering

RMF engineering

Vulnerability management

Communication skills

Education

Bachelor's degree or 10+ years experience

IAM Level III certification (e.g., CGRC, CASP+ CE, CISSP, CISM)

Tools

IAT Level III (preferred)

Job description

Akima Data Management (ADM) seeks an Information System Security Engineer (ISSE) to design, engineer, and validate cybersecurity capabilities across DoW OIG information systems. Based in Alexandria, VA, the ISSE will integrate security engineering into the full system lifecycle and ensure secure, resilient operations across the enterprise.

The role requires top-secret clearance with SCI, DoD/NIST/fedRAMP knowledge, and leadership in risk management, vulnerability remediation, and security policy