GovCIO is currently hiring for a SME Information Systems Security Engineer to lead cybersecurity, compliance, and risk management activities supporting the U.S. Coast Guard's (USCG) Digital Workplace Product Line (DWPL). This role provides principal-level engineering, strategic technical execution, and authoritative security management to maintain federal security standards, manage critical vulnerabilities, and ensure enterprise workspace, mobile, and cloud environments achieve and retain authorization. This position will be located in Alexandria, VA, and will be a hybrid position.

As a SME Information Systems Security Engineer, you will serve as the principal technical authority for the cybersecurity posture, compliance framework, and risk management initiatives across the DWPL. Core responsibilities include:

• Lead the program’s cyber‑risk reduction and vulnerability mitigation strategies across enterprise hardware, cloud productivity suites, and virtual desktop environments.
• Oversee complex continuous scanning, patching, and strategic exposure reduction activities for end-user devices and the Digital Seabag mobile ecosystem.
• Architect ATO compliance frameworks and strengthen security governance for enterprise workspace platforms and Manta Virtual Desktop (MVD) infrastructure.
• Design and implement advanced security automation to improve resilience and consistency across modern USCG desktop systems.
• Collaborate with senior infrastructure and engineering leadership to ensure vulnerability mitigation and scanning tools are deeply embedded in modern digital transformation designs.
• Evaluate enterprise risk and establish compliance baselines to strengthen overall system security governance within DoD secure cloud environments.
• Direct critical technical reviews to continuously analyze and mitigate complex vulnerabilities across physical, mobile, and virtual workplace environments.
• Drive automation implementation and continuous monitoring of security controls within cloud environments, including AI integration and low-code desktop automation frameworks.
• Partner with senior product managers to steer security compliance and prioritize scanning, patching, and risk reduction tasks for workplace hardware and software lifecycles.
• Author and facilitate high-level documentation required to maintain secure interconnections and preserve ATO compliance status for unified messaging and identity management platforms.
• Lead Product Teams in preparing for major cyber assessments to proactively validate vulnerability mitigation and security posture of digital workplace solutions.

High School with 10+ years (or commensurate experience)

Required Skills & Experience

• Certifications: DoD 8570/8140 IASAE Level II or III (e.g., CISSP, CASP+, CSSLP).
• Expert-level experience focused on cyber-risk reduction, vulnerability mitigation, and maintaining compliance frameworks for enterprise-scale endpoint infrastructure.
• Demonstrated technical mastery performing continuous scanning, advanced risk analysis, and endpoint patching workflows across hardware and mobile fleets.
• Deep working knowledge of risk reduction governance, baseline compliance frameworks, and security automation principles within cloud and virtual desktop architectures.
• Proven ability to collaborate effectively with senior engineers to translate technical system configurations into risk reduction strategies for modern collaboration platforms..

Clearance Level: Must have an active Secret clearance  

Preferred Skills & Experience

• Prior experience architecting or supporting USCG C5I initiatives, Zero Trust solutions, or large-scale software modernization programs.
• Advanced cybersecurity certifications focused on governance and architecture (e.g., CISSP-ISSAP, CISSP-ISSEP, CCISO, or CISM).
• Exceptional written and verbal communication skills to articulate complex risk metrics, vulnerability statuses, and compliance posture of digital workplace solutions to executive leadership