Information Systems Security Engineer

The Information System Security Engineer will lead the planning, design, and implementation of a modern, on-premises, multi-tenant domain on hyperconverged infrastructure, providing technical leadership in migrating legacy systems and applications while ensuring uptime. Responsibilities include leading A&A and information assurance processes in accordance with RMF guidelines, ensuring secure development and maintenance of tools, managing accreditations, identifying and mitigating security risks, and collaborating with stakeholders. The role involves providing consultation, analysis, and recommendations on system architecture, configuration, and data flows throughout the tool development lifecycle, assisting project personnel with security control implementation, recommending mitigation strategies for vulnerabilities, and maintaining liaison with the ISSM office to synthesize guidance for implementation. Additionally, the engineer will work with the team to write and execute RMF and POA&Ms to address cybersecurity issues and serve as the office representative to relevant Cloud and Security groups.