Software Engineer - Security Operations

Electrosoft•Atlanta, GA

6d•$150,000 - $170,000

About The Position

Electrosoft Services, LLC is seeking a Software Engineer to configure, customize, support, and enhance the Enterprise Governance Risk and Compliance (GRC) platform, currently RSA Archer, in a federal enterprise environment. The role focuses on designing and maintaining GRC use cases and application capabilities aligned with HHS security processes, including POA&M management, security incident handling, system inventory tracking, and ATO workflow automation. The engineer will build platform features and secure integrations that support FISMA, CDM, and FedRAMP workflows, and will provide reporting, dashboards, access logic, and support across development, UAT, and production environments. The role involves troubleshooting, release participation, ticket and change management, documentation, and collaboration with HHS stakeholders and cross-functional teams. It also includes mentoring developers and contributing to OSCAL integration for automated control implementation and system documentation. Candidates should have substantial software engineering and information security experience, a relevant degree or equivalent combination of education and experience, and familiarity with federal cybersecurity requirements and the Enterprise Performance Lifecycle and Software Development Life Cycle. The stated salary range is $150,000–$170,000 USD.

Requirements

At least 10 years of hands-on software engineering experience.
At least 5 years of direct experience configuring, customizing, and supporting the Enterprise GRC platform, currently RSA Archer, in a federal enterprise environment.
A bachelor’s degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field, or an equivalent combination of education and experience.
10 years of Information Security work experience, or an equivalent combination of education, certifications, and IT experience.
Experience working in a federal cybersecurity environment and a strong understanding of NIST 800-53 Rev. 5, FISMA, and DISA STIGs.
Familiarity with and adherence to Enterprise Performance Lifecycle and SDLC policies, including documentation of design, implementation, testing, deployment, rollback, and lessons learned.
Excellent problem-solving skills and the ability to communicate clearly with technical and non-technical stakeholders across HHS.

Nice To Haves

RSA Archer Certified Administrator certification.
CISSP or an equivalent GRC or Information Security certification.

Responsibilities

Configure, customize, and support the Enterprise GRC platform, currently RSA Archer, in a federal enterprise environment.
Design, implement, and maintain GRC platform and application use cases, including POA&M management, security incident handling, system inventory tracking, and ATO workflow automation, aligned with HHS security processes and appropriate approvals.
Build and maintain platform features such as Data Driven Events, calculated fields, cross-reference relationships, and subform rollups for FISMA, CDM, and FedRAMP workflows.
Develop secure REST and SOAP APIs for integrations with CDM, HSDW, and enterprise data reporting platforms, aligned with OMB, NIST 800-53 Rev. 5, and Zero Trust principles.
Create custom reports, iViews, dashboards, and level-driven access logic for user groups across HHS OpDivs and mission-specific roles.
Provide hands-on support for the development, UAT, and production pipeline across HCAP-managed environments.
Troubleshoot issues and perform root cause analysis with Lab Administrators, DBAs, and the QA team during development, deployment, and incident escalation.
Participate in weekly release meetings, demonstrate new functionality to stakeholders, and lead remediation of system defects or change requests.
Use ServiceNow or Remedy to manage tickets, document issue histories, and communicate technical changes and support status to OpDiv representatives.
Maintain and version-control use case documentation, including configuration guides, workflow maps, field and relationship inventories, and change logs.
Mentor mid-level developers on platform architecture, API strategies, control inheritance modeling, and use case optimization.
Maintain detailed documentation of system designs, configuration changes, and implementation history in accordance with HHS audit and knowledge management standards.
Collaborate with Business Analysts, QA Testers, Lab Administrators, and CISO staff to align GRC functionality with security and operational objectives.
Contribute to OSCAL integration for automated control implementation and system documentation.
Follow Enterprise Performance Lifecycle and SDLC policies, documenting design, implementation, testing, deployment, rollback, and lessons learned.
Process changes to production GRC/Archer environments through the Change Control Board, including risk analysis, system impact reviews, and rollback procedures.