Principal Security Engineer

Fannie Mae

Principal Security Engineer securing Fannie Mae’s mortgage infrastructure, cloud, applications, and AI systems. Leading enterprise security architecture, automation, risk remediation, and technical guidance.

Posted 8/11/2026full-timeReston • Texas, Virginia • 🇺🇸 United StatesLead💰 $200,000 - $269,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in enterprise security solutions, cloud security architecture, and risk remediation across multi-cloud environments. Proficient in securing production environments, implementing Infrastructure as Code, and leading cross-functional technical initiatives.

Highest-signal resume keywords

Cloud Security ArchitectureInfrastructure as CodeCybersecurity EngineeringCI/CD Pipeline SecurityRisk Remediation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonGoJavaJavaScriptTypeScriptC#PowerShellBashTerraformCloudFormation

Soft Skills

Analytical SkillsProblem-SolvingCommunicationStakeholder ManagementPresentation Skills

Tools & Technologies

AWSGoogle CloudMicrosoft AzureKubernetesSIEMEDRIAMPAMVulnerability ManagementCloud-Native Security Services

Industry Keywords

Zero-Trust ControlsIdentity-Centric SecuritySecure Software DevelopmentThreat ModelingApplication Security

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoJavaJavaScriptKubernetesLinuxPythonRubyTerraformTypeScript

About the role

Key responsibilities & impact

Lead evaluation, architecture, implementation, integration, and lifecycle support of enterprise security solutions
Provide principal-level technical direction and drive systemic risk remediation from design through operations
Define and implement security architecture, standards, guardrails, and controls across AWS, Google Cloud, Microsoft Azure, hybrid, and multi-cloud environments
Design identity-centric and zero-trust controls for segmentation, connectivity, federation, encryption, secrets, logging, monitoring, and governance
Secure servers, endpoints, virtual machines, containers, Kubernetes, serverless services, APIs, databases, storage, and cloud workloads
Embed security through Infrastructure as Code, reusable modules, reference architectures, architecture reviews, migrations, and cloud modernization
Establish hardening standards, endpoint controls, centralized visibility, automated patching, vulnerability remediation, and lifecycle processes
Lead application and AI security policies, secure design patterns, guardrails, threat modeling, red teaming, security testing, and risk assessments
Develop security requirements, architecture artifacts, technical designs, test plans, policies, standards, procedures, and operational documentation
Partner with cybersecurity, engineering, product, cloud, infrastructure, networking, operations, application, data, privacy, compliance, legal, architecture, and responsible AI teams
Influence roadmaps, architecture decisions, development practices, and operating models while balancing security, privacy, compliance, cost, performance, availability, and delivery
Communicate technical concepts, risk, tradeoffs, and recommendations to engineering, business, executive, and technical decision-maker audiences
Facilitate design reviews, architecture forums, technical evaluations, incident discussions, and stakeholder decision meetings
Participate in on-call rotation and support major outages, critical service issues, and cybersecurity incidents

Requirements

What you’ll need

Minimum 8 years of experience
Extensive experience in cybersecurity engineering, infrastructure or network security, cloud engineering, application security, software engineering, or a related technical discipline
Significant hands-on experience securing production environments in AWS, Google Cloud, and Microsoft Azure
Deep knowledge of cloud security architecture, IAM, networking, encryption, logging, monitoring, workload protection, governance, and enterprise network security
Experience securing Windows and Linux servers, endpoints, databases, containers, Kubernetes, and cloud-hosted workloads
Hands-on experience designing, integrating, and securing CI/CD pipelines with automated security testing, secure release controls, and policy enforcement
Experience with Infrastructure as Code, including Terraform, CloudFormation, Bicep, ARM templates, or equivalent tools
Full-stack engineering experience across front-end applications, back-end services, APIs, databases, cloud services, identity platforms, and infrastructure
Proficiency in one or more of Python, Go, Java, JavaScript, TypeScript, C#, PowerShell, Bash, or Ruby
Experience building integrations through APIs, automation, orchestration, and vendor-supported methods
Strong knowledge of secure software development, application and API security, cloud-native development, containers and registries, Kubernetes security, and software supply chain risks
Experience with SIEM, EDR, vulnerability management, network security platforms, cloud-native security services, IAM, PAM, secrets, certificates, keys, and cryptographic controls
Experience developing security requirements, architecture artifacts, technical designs, implementation and test plans, policies, standards, procedures, proofs of concept, product evaluations, technical testing, data analysis, and architecture assessments
Knowledge of AI security risks and experience applying threat modeling and secure design practices to modern applications, APIs, cloud platforms, or AI-enabled systems
Demonstrated ability to lead complex, cross-functional technical initiatives and communicate effectively with engineers, administrators, executives, and technical decision-makers
Strong analytical, problem-solving, troubleshooting, writing, presentation, and stakeholder-management skills
Ability and willingness to participate in an on-call rotation and support major outages, critical service issues, and cybersecurity incidents
Bachelor's Level Degree (Required)

Benefits

Comp & perks

Fannie Mae incentive program eligibility
Comprehensive benefits package including Health, Life, Voluntary Lifestyle, and other benefits
Physical, mental, emotional, and financial well-being benefits and perks
Flexible work arrangement through Flex work model