Zero Trust Information Systems Security Engineer

Booz Allen Hamilton•Fort Belvoir, VA

12d•$99,000 - $225,000•Remote

About The Position

This role offers an opportunity to leverage system security engineering experience to assist clients with critical missions. As a systems security and network security engineer, you will identify information system security engineering needs to assess vulnerabilities and recommend the best solution and security strategy. The position involves leading the development and implementation of security solutions to protect military systems. Responsibilities include troubleshooting and analyzing complex challenges using knowledge of network and security devices, applications, and identifying tools. The role requires curiosity for technology and market trends to research and develop security solutions. Using cybersecurity knowledge and experience, you will assess security threats and implement infrastructure controls, closely impacting the DoD by protecting their infrastructure. The team focuses on mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills to grow and provide the best solutions for customers, including securing and protecting critical AI or ML networks.

Requirements

6+ years of experience in an ISSE, ISSO, or IT role
Experience with ICAM principles and technologies, including multi-factor authentication, privileged access management, security operations, and security architecture leveraging ICAM solutions such as SailPoint, Radiant Logic, Ping Federate, Delinea, and Okta
Experience with administration and integration of directory services, including LDAP compliant directories such as Active Directory
Experience with SAML, OAuth 2.0, and OpenID Connect (OIDC) integrations and troubleshooting protocol exchanges
Experience with DoD architecture, strategic planning, concept of operations, performance attributes, system architecture and design, evolving methodologies, and statutory and regulatory requirements
Knowledge of Zero Trust principles and frameworks such as NIST 800-207
Ability to resolve complex identity and federation issues
TS/SCI clearance
Bachelor’s degree
IASAE II Certification such as CASP+, CISSP, or CSSLP Certification

Nice To Haves

Experience with cybersecurity tools and technologies such as IDS/IPS, firewalls, host-based security, and DevSecOps tools and practices, including CI/CD pipelines such as GitLab CI/CD and Azure DevOps
Experience with Security Information and Event Management (SIEM) systems such as Splunk, Elastic, Logstash, and Kibana
Experience with data broker technologies such as Cribl or Confluent, operating systems security events such as Windows or Linux, and networking protocols such as TCP/IP, DNS, DHCP, or HTTP/HTTPS
Experience with programming or scripting, including with PowerShell, Ansible, Python, and automation frameworks such as Ansible, Terraform, Puppet, or Chef
Experience integrating AI/ML capabilities to automate, enhance, and accelerate IT operations and security monitoring
TS/SCI clearance with a polygraph
Offensive Security Certified Professional (OSCP), GIAC Certified Incident Handler (GCIH), or GIAC Vulnerability Assessment Professional (GVAP) Certification

Responsibilities

Design, develop, and implement automated workflows and integrations.
Focus on safeguarding critical information systems and data against advanced cyber threats, with a primary emphasis on Zero Trust architecture, security data analytics, and robust automation.
Leverage data analytics, visualization, and observability techniques to enhance threat detection, incident response, and security posture.
Perform close collaboration with cross-functional teams.
Assist with the development of security policies.
Perform continuous evaluation of security controls to ensure confidentiality, integrity, and availability of sensitive information.
Automate security processes.
Integrate security into the CI/CD pipeline.
Ensure compliance with DoD, Army, and Intelligence Community (IC) standards and regulations.