Senior ISSE – RMF, Zero Trust & Azure Security

Sigma Defense; City of Rome (NY); Hybrid; USD 125,000 - 155,000; Full time

Benefits offered by this job

Dental and Vision Insurance

Medical Insurance with HSA/FSA/DFSA

Life and AD&D

Employee Assistance Program (EAP)

401(k) Matching

Paid Time Off

Holidays

Educational Assistance

Competitive Salary

Job summary

Sigma Defense seeks a Senior Information Systems Security Engineer (ISSE) to join our Rome, NY team. The role centers on implementing RMF within Zero Trust architectures, engineering security controls across Azure, and automating RMF evidence with ACAS and Xacta.

The candidate will lead vulnerability management, cloud security posture, and automation initiatives, coordinating with architects, DevSecOps, and ISSOs to sustain robust security across the lifecycle.

Qualifications

• 8+ years of experience in information systems security engineering, cybersecurity engineering, or a closely related technical discipline.
• Strong hands-on experience with ACAS, including vulnerability scanning, results analysis, remediation tracking, and validation.
• Demonstrated experience implementing cybersecurity requirements under the DoD RMF.
• Strong understanding of Zero Trust architecture and security principles and their application within RMF environments.
• Hands-on experience with Microsoft Azure security technologies and cloud security architecture.
• Experience developing and administering Azure Policy for security, governance, and compliance enforcement.
• Experience with Microsoft Defender for Cloud, including security posture management, recommendations, regulatory compliance, and workload protection.
• Experience with Xacta, with an emphasis on automation, RMF workflow improvement, evidence management, or continuous authorization.
• Experience with infrastructure automation and Infrastructure as Code (IaC) concepts and technologies.
• Ability to translate cybersecurity requirements and security controls into technical configurations and automated enforcement mechanisms.
• Strong understanding of vulnerability management, system hardening, security-control implementation, and continuous monitoring.
• Must be a U.S. citizen.

Responsibilities

• Serve as a senior cybersecurity engineering resource supporting the implementation and maintenance of security controls throughout the system lifecycle.
• Apply RMF principles within Zero Trust architectures, translating security and compliance requirements into practical technical controls.
• Perform and support vulnerability assessment and continuous monitoring activities using Assured Compliance Assessment Solution (ACAS).
• Analyze ACAS scan results, identify vulnerabilities, configuration deficiencies, and work with engineering teams to develop and validate remediation strategies.
• Design, implement, and maintain security controls within Microsoft Azure environments.
• Develop and manage Microsoft Azure Policy initiatives, assignments, exemptions, and compliance controls to enforce security requirements at scale.
• Utilize Microsoft Defender for Cloud to assess security posture, identify vulnerabilities and misconfigurations, monitor compliance, and improve cloud workload protection.
• Support the implementation of Zero Trust security principles, including identity, device, network, application, workload, and data security controls.
• Develop and maintain Xacta automation capabilities to improve RMF documentation, evidence collection, control validation, and continuous authorization processes.
• Automate security and compliance processes through Infrastructure as Code (IaC) and other infrastructure automation technologies.
• Integrate security requirements and compliance validation into automated deployment and configuration-management workflows.
• Develop repeatable methods for collecting security-control evidence and reducing manual RMF and assessment activities.
• Collaborate with system architects, cloud engineers, DevSecOps teams, system administrators, ISSOs, and other cybersecurity personnel.
• Provide technical guidance on system security architecture, control implementation, vulnerability remediation, and cybersecurity risk.
• Support security assessments, authorization activities, continuous monitoring, and ongoing maintenance of the system's security posture.

Skills

8+ years experience

ACAS vulnerability management

RMF implementation

Zero Trust architecture

Azure security

Azure Policy

Defender for Cloud

Xacta automation

Infrastructure as Code

security controls design

vulnerability management

U.S. citizenship

Education

Bachelor's degree in Cybersecurity or related

Tools

ACAS

Defender for Cloud

Xacta

Job description

Sigma Defense seeks a Senior Information Systems Security Engineer (ISSE) to join our Rome, NY team. The role centers on implementing RMF within Zero Trust architectures, engineering security controls across Azure, and automating RMF evidence with ACAS and Xacta.

The candidate will lead vulnerability management, cloud security posture, and automation initiatives, coordinating with architects, DevSecOps, and ISSOs to sustain robust security across the lifecycle.