Information Systems Security Engineer (ISSE)

LMI•Remote,

1d•$92,075 - $158,138•Remote

About The Position

LMI is seeking an Information System Security Engineer (ISSE) to design, implement, and validate security controls for Amazon Web Services (AWS) infrastructure and mission applications supporting Department of War mission partners. This hands-on role engineers secure solutions across development, deployment, and operations, with a focus on security architecture, hardening, AWS cloud and container security, automation, vulnerability remediation, and technical testing. The ISSE works with engineers, the Information System Security Manager (ISSM), and the Information System Security Officer (ISSO) to implement controls and provide evidence supporting authorization and continuous monitoring. This is a remote position requiring an active Secret security clearance and the ability to obtain and maintain Top Secret if required by the assignment. Periodic travel may be required for integration, assessments, customer meetings, and access to approved facilities. All classified work must be performed in approved facilities. LMI is a digital solutions provider focused on accelerating government impact through innovation and speed. It develops commercial-grade platforms and mission-ready AI for federal agencies, serving defense, space, healthcare, and energy sectors. LMI is headquartered in Tysons, Virginia.

Requirements

Active Secret security clearance, with the ability to obtain and maintain Top Secret if required by the assignment.
Minimum of five years of relevant experience in systems security engineering, cybersecurity engineering, cloud security, secure platform engineering, or a related technical field.
Hands-on experience implementing, troubleshooting, and validating security controls; policy review or compliance documentation experience alone does not satisfy this requirement.
Experience engineering or securing Department of Defense (DoD) information systems, including systems operating on or connected to the Department of Defense Information Network (DODIN).
Demonstrated hands-on professional experience implementing, securing, operating, and troubleshooting AWS workloads. Candidates must be able to describe AWS environments they supported, security controls they personally implemented, and remediation they validated. AWS certification or coursework alone, or experience limited to other cloud providers, does not satisfy this requirement.
Practical experience with AWS Identity and Access Management (IAM), Amazon Virtual Private Cloud (VPC), security groups, compute and storage security, encryption, and AWS logging and monitoring, including AWS CloudTrail and Amazon CloudWatch.
Experience hardening and troubleshooting Linux systems and containerized workloads, with working knowledge of Kubernetes security controls.
Experience using scripting, infrastructure as code, or configuration-management tools to automate security tasks, and working with source control and software delivery pipelines.
Working knowledge of TCP/IP networking, routing, firewalls, network segmentation, secure application connectivity, certificates, encryption, and identity and access management.
Experience applying RMF requirements, NIST SP 800-53 controls, STIGs, vulnerability scanning, and remediation practices to technical implementations and authorization evidence.
Current relevant cybersecurity certification and ability to meet applicable contractual workforce qualifications, including DoD 8140 work-role requirements where applicable.
Strong technical writing, troubleshooting, and coordination skills; ability to work independently with distributed engineering teams and support periodic travel.
A college degree is not required.
Applicants must meet eligibility requirements for a U.S. Government security clearance. Only U.S. citizens are eligible for a security clearance.

Nice To Haves

Experience securing AWS GovCloud environments or Amazon Elastic Kubernetes Service (EKS), including workloads supporting DoD Impact Level 4, 5, or 6.
Experience with Terraform, Ansible, GitLab, Helm, policy as code, hardened container images, software bills of materials, artifact signing, or automated security evidence collection.
Experience engineering Zero Trust controls, Common Access Card authentication, DoD public key infrastructure integration, or secure interfaces between approved mission environments.
Experience supporting eMASS or another government authorization system through engineering artifacts, control implementation details, assessment responses, and remediation evidence.
Experience supporting Special Operations Forces, combatant commands, mission software, AI-enabled platforms, or robotics and autonomous-system programs.
CISSP, ISSEP, CCSP, Certified Kubernetes Security Specialist, cloud security, or another relevant advanced technical certification.
Bachelor's or master's degree in cybersecurity, computer science, information systems, engineering, or a related discipline.

Responsibilities

Translate mission needs and security requirements into system architectures, control implementations, secure configurations, and testable acceptance criteria.
Perform threat modeling and security design reviews; identify trust boundaries, attack surfaces, data flows, dependencies, and technical risks before deployment.
Engineer and implement security controls for AWS infrastructure, Linux systems, containers, Kubernetes, application interfaces, and supporting services in coordination with system owners.
Configure and validate identity and access controls, least-privilege permissions, network segmentation, encryption, certificates, secrets management, audit logging, and security monitoring.
Apply Defense Information Systems Agency Security Technical Implementation Guides (STIGs) and approved hardening baselines; test changes for security effectiveness and mission impact.
Integrate security scanning and checks into continuous integration and continuous delivery pipelines, including code, dependency, container-image, secrets, and infrastructure-configuration checks.
Use scripting, infrastructure as code, and configuration automation to deploy repeatable security controls, detect configuration drift, and collect technical evidence.
Analyze vulnerability findings, validate applicability, implement fixes, and retest remediation; propose compensating controls for authorized review when immediate correction is not feasible.
Develop and execute security verification tests, support authorized assessments, and troubleshoot issues involving application, network, cloud, identity, and container security controls.
Produce security diagrams, configuration baselines, control implementation details, and test evidence supporting Risk Management Framework (RMF) activities and Authority to Operate (ATO) packages.
Coordinate technical remediation and closure evidence with the ISSO and ISSM; document residual risks and recommendations for government risk decisions without independently accepting risk.
Assess proposed system changes, maintain engineering documentation and runbooks, and support incident investigation, recovery, and corrective actions with responsible operations teams.