Security and Compliance Engineer | Top Secret clearance w/SCI eligibility

AMERICAN SYSTEMS; Arlington (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

AMERICAN SYSTEMS seeks a Security and Compliance Engineer to join the Mission Engineering and Integration Team in Arlington, Virginia. You will translate cybersecurity and compliance requirements into practical solutions for data ingest, partner access, and integration across cloud, on-premises, and hybrid environments, including classified systems.

You will coordinate with cross-domain, network, cloud, software, data, and operations teams to ensure authorization readiness and auditability,

Qualifications

• Active Top Secret clearance with SCI and SAP eligibility.
• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related discipline.
• 8+ years of related experience in cybersecurity, compliance, or engineering.
• RMF/A&A certification or equivalent risk management experience.
• Experience with data movement, application onboarding, partner access, or enterprise integration in cloud/on-premises/hybrid, especially in classified settings.
• Knowledge of ABAC concepts, identity attributes, least privilege, PKI, and auditing requirements.
• Familiarity with cross-domain solution planning, controlled transfer mechanisms, and multilevel security concepts.
• Ability to assess security impacts, risks, testing needs, and documentation updates.
• Ability to coordinate across software, network, data, operations, security, and government teams.

Responsibilities

• Define cybersecurity, compliance, encryption, identity, audit, logging, and monitoring requirements for data ingest and integration.
• Drive authorization readiness with classification, releasability, control mapping, and evidence requirements.
• Develop security artifacts and readiness packages for authorization.
• Assess integration risk across least privilege, ABAC, crypto protections, monitoring, and auditability.
• Coordinate secure implementation with cross-domain, cloud, and on-prem teams for CDS and secure-transfer patterns.
• Validate security controls during build, testing, production cutover, and sustainment.
• Collect and organize vulnerability results, control statements, test results, and readiness artifacts.
• Monitor compliance posture for control drift, audit gaps, and mission data-flow risks.
• Advise stakeholders on secure integration approaches that preserve mission velocity while meeting gov obligations.

Skills

Top Secret clearance with SCI and SAP

8+ years of related experience

RMF & A&A knowledge

ABAC concepts

Cross-domain / multilevel security

Education

Bachelor’s degree in cybersecurity, IT, CS, or engineering

Tools

eMASS

Xacta

ACAS/Nessus/Tenable

Splunk

STIG Viewer/SCAP

Job description

AMERICAN SYSTEMS, a 100% employee-owned government contractor, is seeking a Security and Compliance Engineer to join our Mission Engineering and Integration Team in Arlington, Virginia.

In this role, you’ll help Government and mission teams securely integrate data, applications, partners, and internal capabilities across cloud, on-premises, and hybrid environments, including classified and controlled information systems. You’ll translate complex cybersecurity and compliance requirements into practical, repeatable solutions that support authorization, access control, encryption, monitoring, and audit readiness.

Your work will help enable secure, mission-ready operations while directly supporting important national security objectives.

• This job requisition is for potential upcoming work at AMERICAN SYSTEMS and does not represent a current opening. Qualified candidates will be contacted when the work/funding becomes available. ***

Responsibilities

As a Security and Compliance Engineer with AMERICAN SYSTEMS, you will have an opportunity to do the following:

• Define cybersecurity, compliance, encryption, identity, audit, logging, and monitoring requirements for data ingest, application onboarding, partner access, and IPT integration requests.
• Drive authorization readiness by identifying classification, information domain, releasability, transfer direction, control mapping, evidence, and approval requirements early in the intake process.
• Develop security artifacts for integration architectures, interface control documents, access control plans, cryptographic protection plans, test plans, readiness packages, and authorization packages.
• Assess integration risk across least privilege access, ABAC enforcement, cryptographic protections, monitoring needs, auditability, and data handling obligations.
• Coordinate secure implementation with cross-domain, network, cloud, software, data, and operations teams for CDS, diode, RTB-based CDS, API, broker, streaming, and secure-transfer patterns.
• Validate security controls during build, configuration, testing, authorization, production cutover, and sustainment handoff.
• Collect and organize evidence including vulnerability results, control implementation statements, test results, configuration records, findings, mitigation plans, and readiness artifacts.
• Monitor compliance posture for control drift, access-policy exceptions, audit gaps, configuration concerns, and risks to approved baselines or mission data flows.
• Advise mission stakeholders on secure integration approaches that preserve mission velocity while meeting Government authorization and compliance obligations.

Qualifications

Required Qualifications

• Active Top Secret clearance with SCI and SAP eligibility
• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related discipline, plus 8+ years of related experience
• CompTIA Security+ CE or an equivalent DoD 8140/8570 baseline certification
• ISC2 CGRC (formerly CAP) or an equivalent Risk Management Framework (RMF) / Assessment and Authorization (A&A) certification
• Demonstrated knowledge of RMF, ATO support, control mapping, evidence collection, audit readiness, vulnerability management, and risk mitigation
• Experience supporting data movement, application onboarding, partner access, or enterprise integration across cloud, on-premises, and hybrid environments in classified settings
• Working knowledge of ABAC concepts, identity attributes, least privilege, PKI, certificates, key management, secrets handling, logging, monitoring, and audit requirements
• Familiarity with cross-domain solution planning, controlled transfer mechanisms, classification handling, releasability, and multilevel security landing-zone concepts
• Ability to assess technical changes for security impact, implementation risk, testing requirements, rollback considerations, and documentation updates
• Ability to coordinate across software, platform, network, data, operations, security, compliance, mission, and Government teams
• Experience with NIST security controls, vulnerability scanning, STIG compliance, POA&M tracking, and A&A documentation

Helpful to Have

• Relevant DoD cybersecurity or cloud security certifications, including:
• ISC2: CISSP or CCSP
• ISACA: CISM or CISA
• GIAC: GSEC, GCIH, or GCIA
• AWS Certified Security – Specialty
• Azure Security Engineer Associate
• Experience supporting mission application onboarding or enterprise data integration in Special Access Program (SAP) or SCI environments
• Experience with eMASS, Xacta, ACAS/Nessus/Tenable, Splunk, STIG Viewer, SCAP, cloud security services, or DevSecOps security tooling
• Experience preparing compliance evidence for operational readiness reviews, change boards, or authorization milestones

EEO Statement

EEO Race/Sex/Disability Status/Veteran Status