Info Security Sys Engineer

Innova Solutions•Salt Lake City, UT

12h•Onsite

About The Position

Information Security Systems Engineering at Client, you will support the security accreditation and compliance of mission-critical communication systems. This role focuses on applying the Risk Management Framework (RMF) and related cybersecurity standards to ensure systems meet DoD and national security requirements. You will work closely with systems, software, and hardware engineers to integrate security controls, develop authorization artifacts, and support system certification and accreditation activities. This position is ideal for engineers with a strong foundation in cybersecurity governance, risk, and compliance (GRC) who are interested in contributing to high-assurance defense systems.

Requirements

Active Secret Security Clearance.
Bachelor’s degree in cybersecurity, computer science, information systems, or related field with minimum 4 years of prior relevant experience. Graduate Degree and a minimum of 2 years of prior related experience. In lieu of a degree, minimum of 8 years of prior related experience.
Understanding of networking concepts (TCP/IP, network architecture, boundary defense).

Nice To Haves

Exposure to cryptographic systems, FIPS 140-3, or NSA certification processes.
Experience with high-assurance or classified systems.
Hands-on experience executing RMF within DoD environments.
Familiarity with tools such as eMASS or XACTA.
Experience applying NIST SP 800-53 security controls and STIGs.
Experience supporting Authority to Operate (ATO) processes.
Strong technical writing and documentation skills.
Experience working with embedded systems or communications systems.
Familiarity with Agile or DevSecOps environments.
Experience working in cross-functional engineering teams.

Responsibilities

Execute and support RMF lifecycle activities (categorization, control selection, implementation, assessment, authorization, and continuous monitoring).
Develop, maintain, and review RMF documentation (e.g., SSPs, SARs, POA&Ms, Security Plans).
Interpret and apply security controls from NIST SP 800-53, CNSSI 1253, and related guidance.
Support implementation and validation of Security Technical Implementation Guides (STIGs) and other configuration baselines.
Collaborate with cross-functional engineering teams (systems, software, hardware) to ensure security requirements are properly implemented.
Interface with internal stakeholders, Authorizing Officials (AOs), and external assessors to support authorization efforts.
Track and report compliance status, risks, and remediation activities to program leadership.
Contribute to continuous monitoring strategies and ongoing system compliance.
Travel up to 10% as needed.