Information Systems Security Engineer

Leidos•Reston, VA

2d•$87,100 - $157,450•Hybrid

About The Position

Leidos is seeking an experienced Information Systems Security Engineer (ISSE) to lead the security architecture, design, and deployment of mission-critical applications across unclassified, classified, and corporate networks. This role is highly dynamic, requiring a security SME who can bridge network boundaries across DTRA, DIA, and corporate infrastructures leveraging AWS multi-region and hybrid cloud environments. The ideal candidate will design robust Cross Domain Solutions (CDS) and ensure compliant application deployments across multiple government and commercial domains.

Requirements

U.S. Citizenship is required
Candidate must possess an active TS/SCI, or a Top Secret clearance with a current SSBI, and be eligible to obtain a TS/SCI w/ poly level clearance
Requires deep understanding of and ability to apply principles, theories, and concepts of technical domain and has broad understanding of other related specialty areas.
Typically requires BS degree and 4 – 8 years of prior relevant experience in order to operate within the scope contemplated by the level. Certifications, education and relevant work experience will be considered in lieu of a degree.
Deep knowledge of AWS security controls,, Windows/Linux server administration, shared responsibility models, and cloud-native architecture across disparate security classification levels.
Direct experience working within or interfacing with DTRA and DIA networks, security processes, and assessment/authorization lifecycles. Includes experience with VMware, Azure virtual desktop, and Citrix.
Experience with container platforms managed via Kubernetes and Docker.
Deep understanding of Cross Domain Solution technologies, data labeling, guard configurations, and secure data transport mechanisms.
Proven ability to securely integrate government mission systems with commercial/corporate infrastructures, maintaining strict data separation.

Nice To Haves

Active DoD 8570/8140 IAT/IASAE Level III certification (e.g., CISSP, CASP+).
AWS Certified Security - Specialty or AWS Solutions Architect certification is highly preferred.

Responsibilities

Design, integrate, and test Cross Domain Solutions (CDS) allowing secure, policy-compliant data transfers and multi-level data sharing between unclassified and classified environments.
Engineer and maintain secure application architectures within AWS (Commercial, GovCloud, and Secret/Top Secret regions) using cloud-native security tools, IAM policies, and VPC configuration.
Coordinate security compliance and boundary protection architectures across differing DTRA, DIA, and corporate infrastructures.
Oversee the secure deployment and integration of applications across both high-side and low-side systems, ensuring compatibility with both government networks and corporate enterprise baselines.
Author and maintain System Security Plans (SSPs) and authorization artifacts within eMASS, aligning security controls across NIST 800-53, ICD 503, FedRAMP, and agency-specific overlays.
Perform routine system audits, analyze vulnerability scans (e.g., ACAS/Nessus, AWS Security Hub, Prisma Cloud), and guide technical teams through STIG remediation and continuous monitoring.
Serve as the primary security liaison with Authorizing Officials (AOs), ISSOs, and external stakeholders from DTRA, DIA, and corporate leadership to achieve and maintain reciprocity and Authority to Operate (ATO).