Senior ISSE: RMF, Zero Trust & Azure Security Lead

Sigma Defense Systems LLC

City of Rome (NY)

On-site

USD 125,000 - 155,000

Full time

15 hours ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Dental and Vision Insurance

Medical Insurance including HSA/FSA/DF

Life and AD&D coverage

401(k) with company matching

PTO and holidays

Educational Assistance

Job summary

Sigma Defense Systems LLC in Rome, NY, seeks a Senior Information Systems Security Engineer (ISSE) to lead security engineering tasks across RMF and Zero Trust domains. You will implement and validate security controls in Azure, drive policy and compliance, and advance automation via Xacta and IaC.

The role requires 8+ years in cybersecurity engineering, DoD RMF experience, and US citizenship or clearance eligibility.

Qualifications

Bachelor's degree in Cybersecurity or a related field.
8+ years of information systems security engineering experience.
U.S. citizenship or eligibility for clearance.

Responsibilities

Serve as a senior cybersecurity engineering resource supporting the implementation and maintenance of security controls throughout the system lifecycle.
Apply RMF principles within Zero Trust architectures, translating security and compliance requirements into practical technical controls.
Perform and support vulnerability assessment and continuous monitoring activities using ACAS.
Analyze ACAS scan results, identify vulnerabilities, configuration deficiencies, and collaborate with engineering to remediate.
Design, implement, and maintain security controls within Microsoft Azure environments.
Develop and manage Azure Policy initiatives, assignments, exemptions, and compliance controls at scale.
Utilize Defender for Cloud to assess posture, identify misconfigurations, monitor compliance, and enhance workload protection.
Support Zero Trust security principles across identity, device, network, app, workload, and data security controls.
Develop and maintain Xacta automation to improve RMF documentation, evidence collection, and continuous authorization.
Automate security and compliance with Infrastructure as Code and other automation technologies.
Integrate security requirements into automated deployment and configuration-management workflows.
Develop repeatable methods for collecting security-control evidence and reducing RMF effort.
Collaborate with architects, cloud engineers, DevSecOps, admins, ISSOs, and security staff.
Provide technical guidance on security architecture, controls, vulnerability remediation, and risk.