Information Systems Security Engineer (ISSE)

Information Systems Security Engineer (ISSE)

Location:
Hybrid – 3 days onsite in Washington, DC

Job Summary

STAFFXPERT LLC is seeking an Information Systems Security Engineer (ISSE) on behalf of our client in Washington, DC.
This role is responsible for delivering hands-on security engineering support for cloud and enterprise systems. The ideal candidate will have strong expertise in cloud security, system architecture, and DevSecOps, with the ability to integrate security across the system development lifecycle and support authorization and compliance efforts.

Key Responsibilities

• Design, implement, and maintain security controls for cloud environments, including Microsoft Azure and AWS
• Develop and assess secure system and cloud architectures
• Configure and manage cloud networking components such as VNETs, subnets, firewalls, routing tables, and access control mechanisms
• Integrate security requirements across the system development lifecycle (SDLC) and CI/CD pipelines
• Conduct security impact assessments and perform threat modeling to identify and mitigate risks
• Support authorization and accreditation (A&A) activities in alignment with federal security standards
• Apply DevSecOps practices, including security scanning, monitoring, and vulnerability remediation
• Implement security best practices for containers and Infrastructure as Code (IaC)
• Develop security documentation, architecture standards, and risk-based recommendations

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or a related field
• 6+ years of cybersecurity experience, including hands-on engineering work
• Strong networking knowledge, including TCP/IP, firewalls, VPNs, and cloud networking concepts
• Experience with Azure networking services and cloud security architecture
• Proficiency in application security and DevSecOps practices
• Knowledge of federal security frameworks such as NIST RMF, FedRAMP, and related standards
• Experience conducting threat modeling and security impact assessments
• Strong communication and collaboration skills

Preferred Qualifications

• Experience with container technologies such as Kubernetes
• Familiarity with Infrastructure as Code (IaC) tools and practices
• Advanced security certifications such as CISSP, CCSP, or related credentials