Information Systems Security Engineer (ISSE)

KBR•Colorado Springs, CO

31d•$130,000 - $170,000•Onsite

About The Position

The Information Systems Security Engineer (ISSE) will support the secure deployment and operation of the GEMSTONE platform across classified and unclassified environments. This includes air-gapped on-premises systems, ensuring systems are hardened, compliant, and accredited. The role will also contribute to evolving GEMSTONE into a secure hybrid cloud/on-prem platform. The work is part of KBR’s National Security Solutions team, providing high-end engineering and advanced technology solutions to customers in the intelligence and national security communities, with a profound impact on national security. The position involves working on cutting-edge projects supporting the Department of the Air Force’s mission-critical operations, focusing on open source development, DevSecOps, CI/CD pipelines, containerization, Kubernetes, Terraform, and innovative API management and database design. The role contributes to systems designed for a modeling and simulation SaaS platform that revolutionizes military research and development.

Requirements

Bachelors degree in Computer Science or engineering related field
5+ years of experience in information system security engineering (ISSE) or software development/engineering
Experience with Linux and Kubernetes
Strong experience applying DoD STIGs, RMF framework, and security compliance requirements
Experience supporting ATO processes for classified or government systems
Experience securing Linux-based systems and hardened environments
Familiarity with Kubernetes platforms and container security practices
Experience supporting air-gapped or disconnected system deployments
Experience securing hybrid cloud and on-premises architectures
Knowledge of network security principles, including segmentation and access control
Security+ certification
Ability to identify and mitigate system vulnerabilities and cyber risks
Strong collaboration skills to work with developers, platform engineers, and ISSM stakeholders
Active TS clearance, SCI eligible required
Must be located in Colorado Springs, CO and able to work on-site in a SCIF

Nice To Haves

Experience with Kubernetes distributions (e.g., UDS Core, OpenShift, Rancher)
Familiarity with container security tools and vulnerability scanning platforms
Experience with DevSecOps and securing CI/CD pipelines
Knowledge of cross-domain or multi-classification system architectures

Responsibilities

Work closely with developers to integrate security into platform design and deployment workflows
Ensure systems comply with DoD STIGs, RMF controls, and security accreditation requirements
Support deployment of a modeling and simulation platform in cloud and on-premises Kubernetes environments with UDS Core
Support and secure air-gapped deployments, including installation, updates, and sustainment in disconnected environments
Collaborate with the platform team to design and evolve a hybrid architecture spanning cloud and on-prem systems
Implement and validate security controls, patching, and vulnerability remediation processes
Support Authority to Operate (ATO) activities, including documentation, validation, and audit readiness
Partner with the ISSM to maintain continuous monitoring and compliance posture
Assess and secure containerized workloads, APIs, and Kubernetes-based services
Guide implementation of network security, access controls, and boundary protections in classified environments
Participate in security reviews, risk assessments, and incident response activities
Support accreditation and deployment of applications transitioning to higher classification levels