Information Systems Security Engineer (ISSE) Architect

SAIC•Newington, VA

28d•Onsite

About The Position

SAIC is seeking an experienced Information Systems Security Engineer (ISSE) to support the MAJESTIC Joint Program Office (JPO) by performing advanced security engineering and architectural design for mission-critical IT systems. In this role, the ISSE will lead the design, development, implementation, and validation of security architectures, ensuring all security controls are integrated into system engineering processes across the full lifecycle—from requirements development to deployment and sustainment. The ISSE will collaborate closely with program leadership, system owners, developers, ISSMs/ISSOs, enterprise architects, and cybersecurity operations teams to ensure systems meet federal security requirements, including NIST 800-53, RMF, and customer-specific A&A frameworks such as ICD 503 and DAAPM. This role requires on-site support in Springfield, VA.

Requirements

Experienced Information Systems Security Engineer (ISSE)
Advanced security engineering and architectural design for mission-critical IT systems
Lead the design, development, implementation, and validation of security architectures
Ensure security controls are integrated into system engineering processes across the full lifecycle
Collaborate with program leadership, system owners, developers, ISSMs/ISSOs, enterprise architects, and cybersecurity operations teams
Ensure systems meet federal security requirements, including NIST 800-53, RMF, and customer-specific A&A frameworks such as ICD 503 and DAAPM

Responsibilities

Design and engineer secure system architectures, integrating RMF and mission requirements.
Translate security requirements into technical specifications, models, and design artifacts.
Select, implement, and validate security controls and technical mitigations.
Integrate security into system diagrams, data flows, and high-/low-level designs.
Engineer core security solutions (boundary protection, encryption, IAM, auditing, secure configs).
Embed security across the full system lifecycle—requirements through sustainment.
Develop and maintain A&A documentation and support ATO evidence.
Test and verify security controls across applications, platforms, and networks.
Conduct risk assessments, threat modeling, and vulnerability analysis; recommend mitigations.
Assess security impacts of system changes, upgrades, and new integrations.
Apply DISA STIGs, CIS Benchmarks, and maintain hardened configuration baselines.
Design monitoring architectures for SIEM, detection rules, and audit/log collection.
Support incident response with architectural forensics and remediation guidance.
Collaborate with developers, integrators, administrators, and cybersecurity teams.
Present security engineering findings and architecture recommendations to leadership.
Produce technical documentation, diagrams, reports, SOPs, and design artifacts.