Posted 18 days ago
Information Systems Security Engineer (ISSE) Architect
AI Summary
Designs and validates security architectures for mission-critical IT systems across the lifecycle, integrating RMF, NIST 800-53 and A&A requirements. Produces ATO evidence, threat models and architecture recommendations for leadership.
About this role
SAIC is seeking an experienced Information Systems Security Engineer (ISSE) to support the MAJESTIC Joint Program Office (JPO) by performing advanced security engineering and architectural design for mission‑critical IT systems.
In this role, the ISSE will lead the design, development, implementation, and validation of security architectures, ensuring all security controls are integrated into system engineering processes across the full lifecycle—from requirements development to deployment and sustainment.
The ISSE will collaborate closely with program leadership, system owners, developers, ISSMs/ISSOs, enterprise architects, and cybersecurity operations teams to ensure systems meet federal security requirements, including NIST 800‑53, RMF, and customer‑specific A&A frameworks such as ICD 503 and DAAPM.
This role requires on-site supportin Springfield, VA.
Key Responsibilities:
- Design and engineer secure system architectures, integrating RMF and mission requirements.
- Translate security requirements into technical specifications, models, and design artifacts.
- Select, implement, and validate security controls and technical mitigations.
- Integrate security into system diagrams, data flows, and high‑/low‑level designs.
- Engineer core security solutions (boundary protection, encryption, IAM, auditing, secure configs).
- Embed security across the full system lifecycle—requirements through sustainment.
- Develop and maintain A&A documentation and support ATO evidence.
- Test and verify security controls across applications, platforms, and networks.
- Conduct risk assessments, threat modeling, and vulnerability analysis; recommend mitigations.
- Assess security impacts of system changes, upgrades, and new integrations.
- Apply DISA STIGs, CIS Benchmarks, and maintain hardened configuration baselines.
- Design monitoring architectures for SIEM, detection rules, and audit/log collection.
- Support incident response with architectural forensics and remediation guidance.
- Collaborate with developers, integrators, administrators, and cybersecurity teams.
- Present security engineering findings and architecture recommendations to leadership.
- Produce technical documentation, diagrams, reports, SOPs, and design artifacts.
Qualifications
Education:
- High School diploma /GED
Certifications (CWF Requirements):
- Candidates must satisfyCybersecurity Workforce Framework (CWF)ID 652 (Security Architect, Intermediate Level)or633 (System Security Engineer, Intermediate Level)requirements, as outlined by Navy COOL.
This requirement can be met by possessing one or more of the following qualifyingcertifications: - Certified Cloud Security Professional (CCSP).
- Certified Information Systems Security Officer (C)ISSO-A).
- Certified Secure Software Lifecycle Professional (CSSLP).
- CompTIA Cloud+.
- CompTIA SecurityX (formerly CASP+).
- Federal IT Security Professional-Designer-NG (FITSP-D).
- GIAC Cloud Security Automation (GCSA).
- GIAC Continuous Monitoring Certification (GMON).
- GIAC Security Essentials Certification (GSEC).
OR This requirement can be met through:
- ABachelor’s Degreein Cybersecurity, Computer Science, IT, or a related field.
Experience:
- 2-5 yearsof professional experience managing and supporting enterprise-levelITenvironments.
Technical Skills:
- Strong understanding of security architecture, secure system design, and engineering principles.
- Experience developing SSPs, security diagrams, interface documentation, and control implementation descriptions.
- Proficiency with vulnerability scanning tools (Nessus, ACAS, Qualys) and technical analysis platforms.
- Knowledge of DISA STIGs, CIS Benchmarks, and secure configuration/hardening standards.
- Familiarity with SIEM platforms (Splunk, SolarWinds) and enterprise monitoring architectures.
- Understanding of Windows Server, Active Directory security, RHEL, and network security concepts (TCP/IP, VLANs, IPsec, firewalls).
- Experience conducting technical risk assessments and generating architecture‑level recommendations.
- High‑quality technical writing and documentation skills for engineering artifacts and audit evidence.
Clearance Requirement:
- ActiveTS/SCIclearance with the ability to obtain and maintain aTS/SCI with CI Poly.
Work Environment and Notes:
- On-Site Work:All work must be conductedon-sitein Springfield, VA.
- Program Scope:Supports on-premises enterprise IT environments, including virtualized Windows servers, MS SQL Server databases, and networking layers.
- Subcontractor Role:Responsibilities and compensation vary based on the subcontract agreement, with a competitive salary aligned to market rates and role-specific requirements.
Skills
Explore related jobs
More jobs at SAIC
Similar NIST 800-53 jobs
- W
ACA- EndocrinologyWVUH West Virginia University Hospitals · Suncrest Towne Centre - H
Actuary – Property & Casualty - Near ACAS/ACASHealth & Human Services · Wake County, North Carolina - STesting Specialist ACASSignify Health Medical Associates, PLLC · Remote
- CTenable / ACAS AdministratorCACI, INC.-FEDERAL · Stuttgart, Germany
- BMedicaid & ACA ManagerBcbsks · Topeka
- G
ACA - Canine TeamGreater Palm Springs Animal Allies · Palm Springs, California
Jobs in Springfield
- T
Director of Retail & Digital DeliveryThe Atlantic Federal Credit Union · Springfield, New Jersey - W
Contractor Lead/Standards Compliance SMEWiSC Enterprises, LLC · Springfield, VA - GFund Development SupportGirl Scouts of Central Illinois · Springfield, Illinois
- M
Seasonal Retail Commission Sales Associate - Fine Jewelry, Springfield - PAMacy's · Springfield, PA - M
Seasonal Fulfillment and Receiving Support Associate, Battlefield MallMacy's · Springfield, MO - A
House Manager - SpringfieldAnew Behavioral Health, Ohio · Springfield, Ohio
Browse these categories
Market data for security engineer roles
All reports →- SeriesRole reportsOne role family at a time: how many openings, what changed this week, who is hiring, what it pays.
- SeriesSalary reportsWhat employers publish in job postings, by level and workplace. Not self-reported pay.
- Market overviewState of tech hiring, September 2026: up 4.8%Tech hiring rose 4.8% month over month in September 2026, with 411,122 new listings. Customer support and account executive roles led the growth.