[Hiring] Information Systems Security Engineer @LMI

Role Description

LMI is seeking an Information System Security Engineer (ISSE) to design, implement, and validate security controls for Amazon Web Services (AWS) infrastructure and mission applications supporting Department of War mission partners. The ISSE will engineer secure solutions across development, deployment, and operations.

This hands-on role focuses on:

• Security architecture
• Hardening
• AWS cloud and container security
• Automation
• Vulnerability remediation
• Technical testing

The ISSE will work with engineers, the Information System Security Manager (ISSM), and the Information System Security Officer (ISSO) to implement controls and provide evidence supporting authorization and continuous monitoring.

This remote position requires an active Secret security clearance. Periodic travel may be required for integration, assessments, customer meetings, and access to approved facilities. All classified work must be performed in approved facilities.

Responsibilities

• Translate mission needs and security requirements into system architectures, control implementations, secure configurations, and testable acceptance criteria.
• Perform threat modeling and security design reviews; identify trust boundaries, attack surfaces, data flows, dependencies, and technical risks before deployment.
• Engineer and implement security controls for AWS infrastructure, Linux systems, containers, Kubernetes, application interfaces, and supporting services in coordination with system owners.
• Configure and validate identity and access controls, least-privilege permissions, network segmentation, encryption, certificates, secrets management, audit logging, and security monitoring.
• Apply Defense Information Systems Agency Security Technical Implementation Guides (STIGs) and approved hardening baselines; test changes for security effectiveness and mission impact.
• Integrate security scanning and checks into continuous integration and continuous delivery pipelines, including code, dependency, container-image, secrets, and infrastructure-configuration checks.
• Use scripting, infrastructure as code, and configuration automation to deploy repeatable security controls, detect configuration drift, and collect technical evidence.
• Analyze vulnerability findings, validate applicability, implement fixes, and retest remediation; propose compensating controls for authorized review when immediate correction is not feasible.
• Develop and execute security verification tests, support authorized assessments, and troubleshoot issues involving application, network, cloud, identity, and container security controls.
• Produce security diagrams, configuration baselines, control implementation details, and test evidence supporting Risk Management Framework (RMF) activities and Authority to Operate (ATO) packages.
• Coordinate technical remediation and closure evidence with the ISSO and ISSM; document residual risks and recommendations for government risk decisions without independently accepting risk.
• Assess proposed system changes, maintain engineering documentation and runbooks, and support incident investigation, recovery, and corrective actions with responsible operations teams.

Qualifications

• Active Secret security clearance, with the ability to obtain and maintain Top Secret if required by the assignment.
• Minimum of five years of relevant experience in systems security engineering, cybersecurity engineering, cloud security, secure platform engineering, or a related technical field.
• Hands-on experience implementing, troubleshooting, and validating security controls. Policy review or compliance documentation experience alone does not satisfy this requirement.
• Experience engineering or securing Department of Defense (DoD) information systems, including systems operating on or connected to the Department of Defense Information Network (DODIN).
• Demonstrated hands-on professional experience implementing, securing, operating, and troubleshooting AWS workloads.
• Practical experience with AWS Identity and Access Management (IAM), Amazon Virtual Private Cloud (VPC), security groups, compute and storage security, encryption, and AWS logging and monitoring.
• Experience hardening and troubleshooting Linux systems and containerized workloads, with working knowledge of Kubernetes security controls.
• Experience using scripting, infrastructure as code, or configuration-management tools to automate security tasks.
• Working knowledge of TCP/IP networking, routing, firewalls, network segmentation, secure application connectivity, certificates, encryption, and identity and access management.
• Experience applying RMF requirements, NIST SP 800-53 controls, STIGs, vulnerability scanning, and remediation practices to technical implementations and authorization evidence.
• Current relevant cybersecurity certification and ability to meet applicable contractual workforce qualifications.
• Strong technical writing, troubleshooting, and coordination skills; ability to work independently with distributed engineering teams and support periodic travel.

Desired Qualifications

• Experience securing AWS GovCloud environments or Amazon Elastic Kubernetes Service (EKS), including workloads supporting DoD Impact Level 4, 5, or 6.
• Experience with Terraform, Ansible, GitLab, Helm, policy as code, hardened container images, software bills of materials, artifact signing, or automated security evidence collection.
• Experience engineering Zero Trust controls, Common Access Card authentication, DoD public key infrastructure integration, or secure interfaces between approved mission environments.
• Experience supporting eMASS or another government authorization system through engineering artifacts, control implementation details, assessment responses, and remediation evidence.
• Experience supporting Special Operations Forces, combatant commands, mission software, AI-enabled platforms, or robotics and autonomous-system programs.
• CISSP, ISSEP, CCSP, Certified Kubernetes Security Specialist, cloud security, or another relevant advanced technical certification.
• Bachelor's or master's degree in cybersecurity, computer science, information systems, engineering, or a related discipline.

Salary Information

The target salary range for this position is $92,075 - $158,138. The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.

Job Locations

US-Remote