Information Systems Security Engineer (ISSE) Edge

SAIC•Springfield, VA

22h•Onsite

About The Position

SAIC is seeking an experienced Information Systems Security Engineer (ISSE) Edge to support the MAJESTIC Joint Program Office. The Edge ISSE will engineer cybersecurity solutions for forward-deployed systems, remote nodes, and tactical-edge deployments, designing architectures that remain resilient in degraded communications, intermittently connected, and operationally constrained environments. The role supports protection, monitoring, and defensive functions across MAJESTIC’s distributed system footprint. The engineer will work with program leadership, system owners, developers, ISSMs/ISSOs, enterprise architects, and cybersecurity operations teams to align security architectures with federal requirements, including NIST 800-53, RMF, ICD 503, and DAAPM. Work includes integrating security through the system lifecycle, developing accreditation evidence, assessing risk and vulnerabilities, validating controls, and supporting secure operations and incident response. This role requires on-site support in Springfield, Virginia. The position supports on-premises enterprise IT environments, including virtualized Windows servers, MS SQL Server databases, and networking layers. It is a subcontractor role; responsibilities and compensation vary based on the subcontract agreement. The stated target salary range is $120,001–$160,000, with the estimate varying based on experience and other factors.

Requirements

High school diploma or equivalent.
Meet Cybersecurity Workforce Framework ID 652 (Security Architect, Intermediate Level) or ID 633 (System Security Engineer, Intermediate Level) requirements through a qualifying certification or a bachelor's degree in Cybersecurity, Computer Science, IT, or a related field.
Two to five years of professional experience managing and supporting enterprise-level IT environments.
Active TS/SCI clearance and ability to obtain and maintain a TS/SCI with CI Poly.
Strong understanding of edge security architecture, secure system design, and engineering principles for distributed and intermittently connected environments.
Experience developing SSPs, security diagrams, interface documentation, and control implementation descriptions for edge-deployed systems.
Proficiency with vulnerability scanning tools such as Nessus, ACAS, or Qualys, including assessment of remote nodes and field-deployed assets.
Knowledge of DISA STIGs, CIS Benchmarks, and secure configuration and hardening standards applied to resource-constrained edge hardware and software.
Familiarity with SIEM platforms such as Splunk or SolarWinds and mission-edge monitoring architectures, including delayed, disconnected, or low-bandwidth event collection.
Understanding of Windows Server, Active Directory security, RHEL, and core network security concepts including TCP/IP, VLANs, IPsec, and firewalls, with application to distributed tactical networks.
Experience conducting edge-focused risk assessments and threat modeling, and making architecture-level recommendations that account for operational constraints and mission scenarios.
High-quality technical writing and documentation skills for engineering artifacts, audit evidence, and mission-specific edge system documentation.

Responsibilities

Design and engineer secure edge system architectures for distributed, low-bandwidth, and intermittently connected environments.
Translate mission-specific security requirements into edge-focused technical specifications, models, and design artifacts.
Select, implement, and validate security controls and mitigations for tactical-edge systems, remote nodes, and constrained operating conditions.
Integrate security into edge data flows, system diagrams, and high- and low-level designs, ensuring resilience in degraded or disconnected scenarios.
Engineer edge-adapted security capabilities, including boundary protections, encryption, identity and access management, auditing, and secure configurations.
Embed security throughout the edge system lifecycle, from requirements through field deployment, sustainment, and modernization.
Develop and maintain A&A engineering documentation and support ATO evidence for edge systems governed by RMF, ICD 503, and DAAPM.
Test and validate security controls across edge applications, platforms, networks, sensors, and compute nodes.
Perform edge-specific risk assessments, threat modeling, and vulnerability analysis, and recommend mitigations suited to forward-operating environments.
Evaluate security implications of system changes, upgrades, integrations, and technology refreshes affecting edge nodes and data paths.
Apply DISA STIGs and CIS Benchmarks and maintain hardened configuration baselines for edge hardware and software.
Design monitoring architectures that enable SIEM connectivity, detection rules, audit and log collection, and event correlation over intermittent or delayed data links.
Support incident response with edge-architecture forensics, impact assessments, and mission-sustaining remediation guidance.
Collaborate with developers, integrators, system administrators, and cyber teams on secure deployment and integration of edge systems.
Present edge security engineering risks, architectures, and resilience recommendations to senior leadership.
Produce edge-focused technical documentation, diagrams, reports, SOPs, and design artifacts to support mission operations and accreditation.