Job Requirements
Washington, DC
Top Secret/SCI Polygraph not specified
Career Level not specified
$165,000 - $200,000
Job Description
Information System Security Engineer (ISSE) – Cloud, Networking & Platform Security
Overview
Seeking a highly technical Information System Security Engineer to support the design, implementation, and accreditation of secure systems across cloud and hybrid environments. This role requires strong engineering depth—not just RMF familiarity—with hands-on experience securing infrastructure, networking, and modern application platforms. The ideal candidate can translate security requirements into real technical implementations across complex environments.
Key Responsibilities
Engineer and implement security controls across cloud, containerized, and on-prem systems
Support system accreditation efforts by building technically accurate ATO artifacts and evidence
Integrate security into system architecture, including network design, application layers, and infrastructure
Perform continuous monitoring, vulnerability analysis, and risk remediation activities
Analyze scan results and lead remediation of findings through POA&M management
Work directly with developers, cloud engineers, and platform teams to enforce secure configurations
Apply system hardening practices aligned to enterprise security standards
Validate implementation of security controls across infrastructure, containers, and network components
Provide hands-on technical guidance across security engineering, not just documentation compliance
Act as a bridge between engineering teams and compliance stakeholders to ensure controls are properly implemented
Required Technical Expertise (Must-Have Depth)
Strong hands-on experience securing cloud infrastructure (AWS or similar)
Solid understanding of networking fundamentals including routing, segmentation, firewalls, and secure architectures
Practical experience with container security (Docker, Kubernetes, or similar platforms)
Working knowledge of PKI, certificates, encryption, and identity-based security models
Experience implementing security controls within distributed and microservices-based systems
Ability to interpret vulnerability scan results and drive technical remediation actions
Experience with infrastructure-as-code and configuration management tools
Security & Compliance Experience
Hands-on experience executing RMF or equivalent accreditation processes (not limited to documentation)
Ability to build, validate, and defend ATO packages with technically accurate implementations
Experience with security frameworks such as NIST 800-53, STIGs, and related standards
Familiarity with accreditation tools such as eMASS or Xacta
Background & Qualifications
Experience in systems engineering, systems administration, software engineering, or security engineering
Strong Linux systems knowledge with ability to secure operating environments
Active DoD 8570 IAT Level II certification (or equivalent)
Experience working in regulated or classified environments
What This Role Requires (Based on Team Expectations)
This is not a documentation-only ISSO role
Requires strong technical depth in networking, cloud infrastructure, and platform security
Candidates must demonstrate hands-on ability to secure systems, not just familiarity with RMF processes
Emphasis on engineering implementation of controls, not just policy alignment
Overview
Seeking a highly technical Information System Security Engineer to support the design, implementation, and accreditation of secure systems across cloud and hybrid environments. This role requires strong engineering depth—not just RMF familiarity—with hands-on experience securing infrastructure, networking, and modern application platforms. The ideal candidate can translate security requirements into real technical implementations across complex environments.
Key Responsibilities
Engineer and implement security controls across cloud, containerized, and on-prem systems
Support system accreditation efforts by building technically accurate ATO artifacts and evidence
Integrate security into system architecture, including network design, application layers, and infrastructure
Perform continuous monitoring, vulnerability analysis, and risk remediation activities
Analyze scan results and lead remediation of findings through POA&M management
Work directly with developers, cloud engineers, and platform teams to enforce secure configurations
Apply system hardening practices aligned to enterprise security standards
Validate implementation of security controls across infrastructure, containers, and network components
Provide hands-on technical guidance across security engineering, not just documentation compliance
Act as a bridge between engineering teams and compliance stakeholders to ensure controls are properly implemented
Required Technical Expertise (Must-Have Depth)
Strong hands-on experience securing cloud infrastructure (AWS or similar)
Solid understanding of networking fundamentals including routing, segmentation, firewalls, and secure architectures
Practical experience with container security (Docker, Kubernetes, or similar platforms)
Working knowledge of PKI, certificates, encryption, and identity-based security models
Experience implementing security controls within distributed and microservices-based systems
Ability to interpret vulnerability scan results and drive technical remediation actions
Experience with infrastructure-as-code and configuration management tools
Security & Compliance Experience
Hands-on experience executing RMF or equivalent accreditation processes (not limited to documentation)
Ability to build, validate, and defend ATO packages with technically accurate implementations
Experience with security frameworks such as NIST 800-53, STIGs, and related standards
Familiarity with accreditation tools such as eMASS or Xacta
Background & Qualifications
Experience in systems engineering, systems administration, software engineering, or security engineering
Strong Linux systems knowledge with ability to secure operating environments
Active DoD 8570 IAT Level II certification (or equivalent)
Experience working in regulated or classified environments
What This Role Requires (Based on Team Expectations)
This is not a documentation-only ISSO role
Requires strong technical depth in networking, cloud infrastructure, and platform security
Candidates must demonstrate hands-on ability to secure systems, not just familiarity with RMF processes
Emphasis on engineering implementation of controls, not just policy alignment
group id: kforcecx
We offer roles across all three clearance levels: Confidential, Secret and Top Secret. With a Top Secret Facilities clearance, a proven subcontractor track record and a deep understanding of agencies across Defense, Intelligence, Homeland, Justice and Federal Civilian Sectors, Kforce brings more than 20 years of experience to supporting critical missions at federal, state and local levels.
