Security Engineering Lead

Peraton•,

11d•$112,000 - $179,000•Remote

About The Position

Peraton is seeking a Security Engineering Lead to provide technical leadership for designing, implementing, and evolving enterprise security capabilities across complex federal environments. The role leads security architecture and engineering initiatives that protect cloud infrastructure, applications, networks, identities, and sensitive data while supporting mission requirements and regulatory compliance. The position focuses on engineering security solutions for FedRAMP High environments and implementing Zero Trust architectures at federal enterprise scale. The successful candidate translates security requirements into scalable technical controls, integrates security capabilities across hybrid and multi-cloud environments, and collaborates with architecture, infrastructure, cloud engineering, DevSecOps, compliance, and operations teams. Applying AI, machine learning, or automation to cybersecurity use cases is a plus. This is a remote position, with work required during 8 a.m.–5 p.m. Eastern Time. The candidate must be a U.S. citizen and able to obtain and maintain the required Public Trust level clearance.

Requirements

U.S. citizenship and ability to obtain and maintain the required Public Trust level clearance.
One of the following education and experience combinations: bachelor’s degree and 12 years of experience; master’s degree and 10 years; associate degree and 14 years; or high school diploma or equivalent and 16 years.
One or more relevant certifications: CISSP, CISM, CASP, CCISO, Security+, or CAP.
Proven experience supporting ATO efforts in FedRAMP High or other federal environments.
Experience designing, implementing, or engineering security controls in FedRAMP High or comparably stringent federal cloud environments.
Strong understanding of NIST SP 800-53, federal security requirements, cloud security controls, and continuous monitoring practices.
Experience implementing or engineering Zero Trust capabilities in large, complex enterprise or federal environments.
Experience with cloud security architecture, identity and access management, network security, encryption, logging, vulnerability management, and security monitoring.
Ability to translate security frameworks and architectural requirements into practical technical implementations.
Experience with AWS GovCloud, Microsoft Azure Government, or other government cloud environments.

Nice To Haves

Direct experience supporting FedRAMP High authorization, continuous monitoring, or security control assessment activities for federal cloud services.
Experience implementing federal Zero Trust architectures aligned with applicable federal guidance and agency roadmaps.
Experience applying artificial intelligence, machine learning, or automation to cybersecurity use cases.

Responsibilities

Apply federal security requirements, including NIST SP 800-53, FedRAMP baselines, and agency-specific policies and standards.
Partner with cloud platform, infrastructure, and compliance teams to implement controls for identity, encryption, logging, vulnerability management, configuration management, and incident response.
Lead security engineering activities for Authority to Operate (ATO) authorization and maintenance, including control implementation, authorization package development, risk remediation, and continuous monitoring.
Support continuous monitoring, security assessments, vulnerability remediation, and evidence collection.
Identify security gaps, evaluate technical risks, and develop remediation strategies that support authorization requirements and ongoing compliance.
Lead engineering and implementation of Zero Trust capabilities across large-scale federal enterprise environments.
Apply Zero Trust principles across identity, devices, networks, applications, workloads, and data.
Assess emerging AI-enabled security capabilities for effectiveness, scalability, data protection, and operational risk.
Support secure adoption of AI-enabled technologies through appropriate access controls, monitoring, data governance, and risk management practices.