Job DescriptionSAIC is seeking an
Information System Security Engineer to provide cybersecurity leadership and governance across
DoD IL5 and IL6 cloud platforms, ensuring secure design, continuous monitoring, and compliance across multiple cloud brokers. This role oversees RMF lifecycle execution, ATO sustainment, and security engineering alignment for cloud based development and production environments-while partnering closely with engineering, operations, and mission stakeholders to maintain a resilient, audit-ready security posture.
In this role, you'll contribute to Naval Operational Architecture (NOA), working alongside engineers and operators to deliver resilient, forward-leaning solutions in support of national defense.
Job Duties:
- Lead RMF lifecycle execution for IL5/IL6 cloud systems, including control inheritance, evidence generation, and continuous monitoring.
- Manage ATO packages, ensuring timely renewals, POA&M tracking, and alignment with DoD cybersecurity requirements.
- Oversee cloud security posture across AWS GovCloud (primary) and Azure (future), ensuring compliance with DoD and organizational standards.
- Coordinate with cloud brokers to validate boundary protections, shared responsibility models, and service configurations.
- Provide ISSM oversight for engineering teams, including secure architecture reviews and change-control participation.
- Support containerized architectures including EKS, Kubernetes, and microservices security controls.
- Guide implementation of IaC security for Terraform/CloudFormation-based deployments.
- Ensure compliance of Red Hat Linux systems, including STIG application and patch governance.
- Advise on network security fundamentals including VPC design, routing, segmentation, and boundary defense.
QualificationsRequirements:
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field.
- IAT II certification required (e.g., Security+ CE).
- 9 years of cybersecurity experience supporting DoD or federal systems.
- Hands-on RMF and ATO experience for IL5/IL6 or similar classified environments.
- Prior ISSE or ISSM experience supporting cloud or hybrid architectures.
- AWS GovCloud experience with security services, boundary controls, and compliance frameworks.
- Familiarity with Azure security (preferred, not required).
- Proficiency with Linux security, especially Red Hat Enterprise Linux.
- Experience with container security including EKS and Kubernetes.
- Active SECRET clearance required with the ability to obtain a TS/SCI; TS/SCI strongly preferred.
Desired Skills:
- Master's degree in Cybersecurity, Computer Science, Information Systems, or related field.
- CISSP or CySA+ certification.
- IaC tooling experience (Terraform, CloudFormation) with secure automation pipelines.
- Cloud-native security tooling such as GuardDuty, Inspector, Security Hub, or Azure Defender.
- Network architecture understanding including cross-domain solutions and enclave segmentation.
- Strong documentation skills for audits, assessments, and engineering artifacts.
- Experience with SSO/IdP integrations (Azure AD, Okta, Ping).
- Knowledge of container orchestration and secure CI/CD pipeline.
