Cybersecurity Engineer - Clearance Required

LMI•Colorado Springs, CO

1d•$111,427 - $200,000

About The Position

LMI is seeking a Cybersecurity Engineer to support the secure deployment and continuous authorization of IronSled, an enterprise Platform as a Service built for federal missions. The role is part of a small, high-visibility team and owns security work that enables production deployment, maintains the authorization to operate (ATO) posture, manages vulnerabilities, and works with cybersecurity stakeholders to keep the platform compliant as it evolves. This is hands-on cyber engineering, involving collaboration with platform engineers, ISSOs, and the security team to harden deployments, validate controls, and resolve findings on operational systems. IronSled is LMI’s DevSecOps platform and central hub for software development projects. It enables internal and external users to set up development environments. The role supports the LIGER deployment and includes leading Risk Management Framework activities, maintaining authorization artifacts, translating security controls into engineering requirements, and partnering with engineering teams on cloud, container, and pipeline security. An active TS/SCI security clearance is required. LMI is a digital solutions provider focused on accelerating government impact through innovation and speed. It develops commercial-grade platforms and mission-ready AI for federal agencies, serves the defense, space, healthcare, and energy sectors, and is headquartered in Tysons, Virginia.

Requirements

Active TS/SCI security clearance.
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field.
At least 5 years of experience designing, implementing, and monitoring cybersecurity solutions in federal environments.
At least 5 years of hands-on RMF experience, including ATO development and continuous monitoring against NIST 800-53.
CISSP, CISM, or equivalent senior-level cybersecurity certification.
Experience securing LLM, GenAI, or agentic AI systems, including data handling, prompt and tool-call risk, and model output controls.
Strong working knowledge of cloud security, particularly AWS, with experience in GovCloud or similar high-compliance environments.
Experience with vulnerability management workflows, including scanning, triage, remediation tracking, and reporting.
Experience hardening systems against secure baselines such as CIS Benchmarks or DISA STIGs.
Familiarity with secure software development practices, including secrets management, access control, auditability, and CI/CD pipeline security.
Strong written communication skills, including the ability to produce ATO artifacts for assessor and Authorizing Official review.
Ability to translate compliance requirements into specific engineering work and partner closely with developers.

Nice To Haves

Direct experience supporting ATO or continuous authorization for systems hosted at DHS or another DHS component.
Familiarity with DHS 4300A and cybersecurity policies and processes.
FedRAMP readiness or assessment experience at the Moderate or High level.
Hands-on container and Kubernetes security experience, such as EKS, image scanning, admission control, and runtime protection.
DevSecOps experience integrating security scanning into GitLab CI/CD pipelines.
Experience securing LLM, GenAI, or agentic AI systems, including data handling, prompt and tool-call risk, and model output controls.
Experience with vulnerability management platforms such as Tenable.
Experience with ATO documentation tools such as Xacta, OpenRMF, or similar.
Familiarity with CISA Binding Operational Directives, Continuous Diagnostics and Mitigation (CDM), or High Value Asset (HVA) program requirements.

Responsibilities

Lead Risk Management Framework activities for the LIGER deployment, including system categorization, control selection and tailoring, implementation, assessment, and continuous monitoring.
Own and maintain authorization artifacts, including the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and supporting documentation aligned to DHS requirements.
Coordinate with ISSOs, Authorizing Officials, and cyber working groups to advance ATO and continuous authorization activities.
Interpret NIST 800-53 controls for the LIGER platform and translate them into actionable engineering requirements.
Run and review vulnerability scans across CI/CD pipelines and runtime environments, triage findings, and drive remediation with the engineering team.
Validate secure configurations and hardening baselines, such as CIS Benchmarks and DISA STIGs, on containers, hosts, and cloud resources.
Partner with platform engineers on cloud and container security in AWS GovCloud, including IAM, network controls, secrets management, logging, and runtime protection.
Develop and maintain security policies, procedures, and standard operating procedures for LIGER on customer infrastructure.
Track audit findings, remediation actions, and POA&M items through closure.
Support FedRAMP-aligned control implementation and inheritance where applicable.
Advise senior LIGER personnel and leadership on system risk levels, control effectiveness, and emerging compliance considerations for AI/LLM systems in federal environments.