Remote Federal Security Engineer: FedRAMP & Compliance

Bixal; Fairfax (VA); On-site; USD 145,000 - 155,000; Full time

Benefits offered by this job

Flex hours

401K with matching incentive

Parental Leave

Medical/dental/vision benefits

Flex Spending Account

Company provided short-term disability

Commuter benefits

PTO

11 Paid holidays

Job summary

Bixal, a Fairfax, VA-based consulting firm, seeks a senior security engineer to embed secure-by-design controls into a federal developer platform. You will partner with ISSOs/ISSEs and the Platform Enablement team to keep FedRAMP systems compliant while preserving engineering velocity.

The role focuses on policy-as-code, identity federation, and automated audit-evidence collection to integrate security into the delivery workflow, enabling rapid, compliant delivery across federal projects.

Qualifications

• Bachelor's degree or equivalent with 8+ years related experience.
• Leadership in secure engineering practices (threat modeling, code scanning, dependency controls).
• Experience aligning controls with regulatory, privacy, and audit requirements.
• Ability to design/implement identity, access, encryption, and data protection controls in production.
• Hands-on track record reducing security risk via automation, monitoring, and preventive controls.
• Experience supporting FISMA Moderate or higher ATO processes for federal systems.
• Must obtain and maintain Tier 4 High Risk Public Trust clearance.

Responsibilities

• Design and implement secure-by-design controls, policy-as-code, and identity federation.
• Build audit-evidence automation to support continuous compliance.
• Lead threat modeling, code scanning, dependency controls, and remediation efforts.
• Align controls and evidence collection to regulatory, privacy, and federal audit requirements (NIST SP 800-53, FedRAMP).
• Design and implement identity, access, encryption, and data protection controls in production systems.
• Reduce security risk through automation, monitoring, and preventive controls embedded in delivery workflows.
• Act as an engineering partner who ships fixes and enables teams to move fast safely.
• Collaborate with ISSOs/ISSEs and Platform Enablement on ATO and ConMon activities.

Skills

Security leadership

Threat modeling

Code scanning

Dependency controls

Vulnerability remediation

Automation

Audit alignment

FISMA/ATO experience

Education

Bachelor's degree

Tools

Policy-as-code tooling

Terraform security modules

CI/CD security scanning

Snyk

CodeQL

OIDC/SAML

Job description

Bixal, a Fairfax, VA-based consulting firm, seeks a senior security engineer to embed secure-by-design controls into a federal developer platform. You will partner with ISSOs/ISSEs and the Platform Enablement team to keep FedRAMP systems compliant while preserving engineering velocity.

The role focuses on policy-as-code, identity federation, and automated audit-evidence collection to integrate security into the delivery workflow, enabling rapid, compliant delivery across federal projects.