Engineer Jobs

About The Position

Requirements

• Meet one of the following education and experience combinations: a bachelor's degree in Computer Science, Information Assurance, Information Security, Systems Engineering, or a related discipline and at least 9 years of relevant ISSE experience supporting large, multi-tiered programs; a master's degree in a related technical discipline and at least 7 years of relevant experience; or a high school diploma/GED and at least 13 years of relevant experience.
• Experience implementing DoD system accreditation processes, including DIACAP or RMF; RMF experience is preferred.
• Experience creating, reviewing, and maintaining system authorization documentation for completeness, accuracy, and compliance with federal and DoD policies.
• Strong understanding of DoD RMF processes and system accreditation requirements.
• Experience assessing risks associated with integrated open-source, GOTS, and COTS software components.
• Experience with vulnerability management systems, automated security scanning tools, and system accreditation systems of record.
• Experience interpreting and implementing DISA STIGs and SRGs.
• Experience in security planning, vulnerability assessment, risk analysis, risk management, and mitigation.
• Working knowledge of TCP/IP protocols and services, computer architectures, and network topologies.
• Understanding of NIST SP 800-53 controls, control inheritance, and security authorization artifact generation.
• Hands-on experience navigating authorization workflows, uploading security artifacts, and managing POA&Ms in eMASS, Xacta, or equivalent RMF systems of record.
• Experience designing and implementing secure networking, computing, and enclave environments, including systems with differing data-protection or classification requirements.
• Understanding of distributed architectures and cloud-based systems supporting big data applications.
• Knowledge of information assurance policies, procedures, and cybersecurity workforce requirements.
• Must meet applicable DoD 8140 cybersecurity workforce qualification requirements and possess an IAT Level II certification specified for the position; examples include SSCP, Security+ CE, CCNA Security, or GSEC, subject to applicable qualification requirements.
• Strong analytical, technical documentation, communication, and problem-solving skills; ability to work independently and collaboratively with technical teams and government stakeholders.
• Must be willing to work a hybrid schedule averaging one to two days per week onsite in Columbia, Maryland, with flexibility for schedule changes.
• U.S. citizenship and an active U.S. Government Secret security clearance are required.

Nice To Haves

• CISSP-ISSEP certification is highly desired.
• Experience with Bash scripting.
• Experience with Kubernetes container orchestration.
• Experience creating technical diagrams using Microsoft Visio or draw.io.
• Experience with Red Hat Enterprise Linux (RHEL).
• Experience with Amazon Web Services (AWS) cloud environments.

Responsibilities

• Perform or review technical security assessments of computing environments to identify vulnerabilities and noncompliance with information assurance standards and regulations.
• Recommend mitigation strategies for system vulnerabilities and security deficiencies.
• Validate and verify system security requirements and establish secure system designs based on security requirements and operational objectives.
• Design, develop, implement, and integrate information assurance and security systems and components for networking, computing, and enclave environments.
• Support systems with multiple enclaves and differing data-protection or classification requirements.
• Incorporate information assurance requirements and security controls into systems deployed to operational environments.
• Assist architects and developers in identifying and implementing security functionality and ensure consistent application of Agency security policies and enterprise solutions.
• Support development and implementation of secure system architectures and trusted relationships among external systems and architectures.
• Assess and mitigate system security threats and risks throughout the program lifecycle.
• Develop, review, and maintain system authorization documentation in accordance with federal and DoD policies.
• Implement and support DoD RMF processes, including security control assessment, authorization, and continuous monitoring.
• Apply NIST SP 800-53 controls, control inheritance concepts, and security authorization artifact requirements.
• Interpret and implement DISA STIGs and SRGs to support system hardening and security compliance.
• Use vulnerability management systems and automated security scanning tools to identify weaknesses and assess compliance; review results and recommend remediation.
• Manage security authorization workflows, documentation, and POA&Ms in eMASS, Xacta, or equivalent RMF systems of record.
• Assess operational risks associated with integrated open-source, GOTS, and COTS software components.
• Provide security planning, assessment, risk analysis, and risk management support for information systems and network operations.
• Recommend system-level security solutions and guide development teams in meeting security posture requirements.
• Establish and execute defensible security processes when established procedures are unavailable.
• Collaborate with government stakeholders and technical teams to implement appropriate security measures.
• Review certification and accreditation documentation and provide feedback on completeness, accuracy, and compliance.

Benefits

• Simplified Employee Pension (SEP) IRA contribution of 20% of gross compensation, with no employee matching requirement; contributions are fully vested from day one.
• PTO plan of up to 200 hours annually, with flexibility to adjust PTO allocation at the start of each calendar year.
• Voluntary medical plan options, some with a Health Savings Account (HSA).
• Vision and dental benefits.
• Life and AD&D benefits.
• Short- and long-term disability benefits.
• Hospital indemnity, accident, and critical illness insurance.
• Optional identity theft and legal protection services.
• Employee referral bonus eligibility up to $10,000.
• Mobility among Wyetech-supported contracts and locations.
• Team-building events, including monthly lunches, a summer company picnic, and an annual holiday party.
• Two complimentary branded clothing orders annually.