Information Systems Security Engineer – ISSE

AMERICAN SYSTEMS

. Design and implement enterprise-level security architectures for SAP systems .

Posted 5/7/2026full-timeArlington • Virginia • 🇺🇸 United StatesSeniorLead💰 $159,600 - $266,500 per yearWebsite

Tech Stack

Tools & technologies

LinuxOracleSplunkSQL

About the role

Key responsibilities & impact

Design and implement enterprise-level security architectures for SAP systems
Apply JSIG requirements to system authorization, control implementation, and documentation
Manually develop RMF/JSIG authorization artifacts, including SSPs, control narratives, POA&Ms, and supporting evidence
Perform hands-on security assessments on Linux and Windows systems, including command-line audits, compliance scans, log review, and control validation
Analyze scan results, identify security gaps, and support remediation planning and execution
Validate and implement host-based firewall and security configurations in coordination with system administrators
Manage and track POA&Ms through mitigation, remediation, or risk acceptance
Ensure system compliance through continuous monitoring of controls, procedures, and documentation
Identify security deficiencies and provide actionable remediation recommendations
Support system recovery and security oversight following outages or incidents
Participate in change management activities, assessing security impacts to SAP systems
Support security investigations, incident response, and remediation activities
Collaborate with engineering teams to integrate security requirements into system design and production releases

Requirements

What you’ll need

Active Top Secret/SCI with SAP eligibility
Bachelor’s degree in a STEM discipline with 10–11 years of relevant experience, or Master’s degree with 8–10 years of relevant experience
Minimum 5 years of experience designing and implementing enterprise-scale security solutions with hands-on security assessment experience across Linux systems, including command-line validation
DoD 8140 IAT Level III –equivalent certification (e.g., SecurityX, CISSP, CCNP Security, CISA, GCED, GCIH, or CCSP)
Demonstrated experience supporting Special Access Programs (SAP)
Working knowledge of JSIG and its application to RMF authorization
Proven experience authoring RMF/JSIG artifacts by hand, without reliance on automated RMF tools (eMASS, Xacta, etc.)
Strong background in RMF, ICD 503, NIST SP 800-53, DCID 6/3, or current DoD authorization practices
Experience supporting security tools such as Splunk Enterprise, HBSS, McAfee ePO, ENS, and DLP
Demonstrated security engineering experience across Linux, Windows, Cisco platforms, databases (SQL or Oracle), and virtualized environments
Willingness to submit for a CI Polygraph.

Benefits

Comp & perks

healthcare benefits
paid leave
retirement plans
insurance programs
education and training assistance

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security architecture designsecurity assessmentsLinux systemsWindows systemscommand-line validationRMFJSIGsecurity solutions implementationincident responseremediation planning

Soft Skills

collaborationcommunicationproblem-solvinganalytical thinkingattention to detailorganizational skillsleadershipadaptabilitycritical thinkingchange management

Certifications

Top Secret/SCIDoD 8140 IAT Level IIICISSPCCNP SecurityCISAGCEDGCIHCCSPSecurityXBachelor's degree in STEM