Remote Staff Security Engineer – FedRAMP & Compliance

Bixal Solutions, Inc.; Northern (KY); Hybrid; USD 145,000 - 155,000; Full time

Benefits offered by this job

Flex hours

401K with matching incentive

Parental Leave

Medical/dental/vision benefits

Flex Spending Account

Company provided short-term disability

Commuter benefits

Paid Time Off (PTO)

11 Paid holidays

Job summary

Bixal Solutions, Inc. is seeking a Senior Security Engineer to embed secure-by-design controls into a federal developer platform, focusing on policy-as-code, identity federation, and automated audit evidence.

You will partner with ISSO/ISSE and the platform team to keep FedRAMP-authorized systems compliant while enabling rapid engineering velocity. The role offers remote work from anywhere in the USA and a salary range of $145,000–$155,000, with offers typically near the midpoint, reflecting

Qualifications

• Bachelor's degree and at least 8 years of related experience, or an equivalent combination of education and experience.
• Demonstrated leadership building secure engineering practices, including threat modeling, code scanning, dependency controls, and vulnerability remediation.
• Experience aligning technical controls and evidence collection to regulatory, privacy, and audit requirements.
• Proven ability to design and implement identity, access, encryption, and data protection controls in production systems.
• Hands-on track record reducing security risk through automation, monitoring, and preventive controls embedded in delivery workflows.
• Experience supporting FISMA Moderate or higher ATO processes for federal systems.
• Must be able to obtain and maintain a Tier 4 High Risk Public Trust clearance.

Responsibilities

• Design and implement secure-by-design controls, policy-as-code, and identity federation across the platform.
• Build audit-evidence automation to support continuous compliance and reduce manual audit burden.
• Lead threat modeling, code scanning, dependency controls, and vulnerability remediation efforts.
• Align technical controls and evidence collection to regulatory, privacy, and federal audit requirements (e.g., NIST SP 800-53, FedRAMP).
• Design and implement identity, access, encryption, and data protection controls in production systems.
• Reduce security risk through automation, monitoring, and preventive controls embedded directly in delivery workflows.
• Act as an engineering partner who ships fixes and enables teams to move fast safely, not solely a checklist-based reviewer.
• Collaborate with ISSOs/ISSEs and the Platform Enablement team on ATO and continuous monitoring (ConMon) activities.
• Other relevant duties as qualified and trained to perform.

Skills

Threat modeling

Code scanning

Dependency controls

Vulnerability remediation

Identity federation

FISMA/ATO processes

Public Trust clearance

Policy-as-code tooling

Education

Bachelor's degree and 8+ years of related experience

Tools

Terraform security modules

Snyk

CodeQL

OIDC/SAML

Job description

Bixal Solutions, Inc. is seeking a Senior Security Engineer to embed secure-by-design controls into a federal developer platform, focusing on policy-as-code, identity federation, and automated audit evidence.

You will partner with ISSO/ISSE and the platform team to keep FedRAMP-authorized systems compliant while enabling rapid engineering velocity. The role offers remote work from anywhere in the USA and a salary range of $145,000–$155,000, with offers typically near the midpoint, reflecting