Information Systems Security Engineer

Remote. Posted 4 days ago

The role

You will own the security architecture and compliance engineering for the Game Warden platform and customer applications. You will design secure solutions, translate engineering decisions into RMF artifacts, and serve as a technical subject matter expert during assessments.

What you will do

Architect identity and access management designs across AWS, Azure, and GCP.
Build and maintain authorization boundary, network architecture, and data-flow diagrams.
Translate engineering and architecture decisions into RMF artifacts.
Evaluate proposed designs against NIST 800-53, DISA Cloud Computing SRG, STIGs, and FedRAMP requirements.
Govern security and authorization impact of architecture changes and customer integrations.
Synchronize with Solutions Architects and customer architects during onboarding and design.
Establish Zero Trust principles, infrastructure-as-code guardrails, and compliance-as-code practices.
Serve as technical subject matter expert during assessments, readiness reviews, and audits.

Required qualifications

5–8 years of hands-on security engineering, cloud security architecture, or information assurance
Minimum 4 years designing and securing production workloads in AWS, Azure, or GCP
Minimum 3 years supporting DoD or federal authorizations under RMF
Expert fluency in identity and access management
Extensive hands-on experience architecting and securing AWS, Azure, and/or GCP environments
Ability to produce architecture, authorization boundary, and data-flow diagrams using tools such as Lucidchart, draw.io, or Visio
Strong working knowledge of NIST 800-37 (RMF) and NIST 800-53 (Rev 4/5)
Familiarity with DISA PPSM, CAL, DISA Cloud Computing SRG, STIGs, DoD ICAM policy, and DoD Zero Trust Reference Architecture
Active U.S. Secret security clearance
DoD 8570/8140 IASAE Level II baseline certification (CISSP, CASP+, CSSLP) required or obtainable within 90 days
At least one professional-level cloud certification (AWS Certified Security – Specialty, AZ-500, Google Professional Cloud Security Engineer) required or obtainable within 6 months
U.S. citizenship is required

Benefits

Competitive salary
100% employer-paid medical, dental, and vision coverage for you and your dependents
401(k) with a 3% company contribution
Comprehensive wellness benefits including One Medical membership, mental health resources, and family planning support
Equity incentive plan
New hire technology and home office stipend
Annual professional development stipend
Flexible paid time off, plus all federal holidays
Generous parental leave
Flexible remote work opportunities
Employee referral bonus program

Before you apply

Must reside in DC/Maryland/Virginia or Denver/Colorado Springs, CO
Active U.S. Secret security clearance required
U.S. citizenship is required

About the company

Second Front Systems (2F) is a public-benefit software company powering software for the free world. They eliminate friction to enable faster, more secure development and deployment of software across government and regulated networks.