Principal Information Security Engineer
Clarityinnovates · Fort Meade, MD
About this role
**Clarity Innovations — Principal Information Security Engineer** **Position Description** The Information Systems Security Engineer will directly support development teams building a new IaC environment, driving security innovation and implementation across the project. The role also includes establishing and maintaining ATO packages and their associated artifacts. Success requires comfort working at the forefront of new ideas and a strong desire to learn and apply automated, cutting-edge practices (e.g., Classified Cloud, CI/CD, and more). **Key Responsibilities** - Manage and develop artifacts required to obtain a government continuous authorization to operate. - Develop and integrate cybersecurity best practices for Kubernetes clusters and DevOps pipelines. - Create and update artifacts (e.g., SSP, hardware/software lists, PPSM, SCTM). - Coordinate with project engineers to implement security controls and enforce policy—turning RMF security controls into technical requirements for software and platform engineers. - Support authorization assessments by engaging with the security control assessor from the authorizing official’s office. - Implement technologies into CI/CD processes and systems to establish secure-by-default standards. - Recommend security mitigations and enhancements aligned to information assurance guidelines and customer requirements. - Perform vulnerability/risk/security impact analysis of cloud CI/CD development systems, applications, networking, and orchestration across the SDLC. - Provide input into an audit and accountability plan for continuing accreditation. - Ensure information systems meet or exceed compliance requirements. - Identify, report, and ensure resolution of security violations. - Monitor and review equipment/procedure updates to maintain pace with information assurance requirements and business needs. **Qualifications** - U.S. citizen with active TS clearance with SCI and SAP eligibility. - Current DoDM 8570 IAT Level II or Level III certification, or DoD 8140.01 intermediate certifications under the “Security Architect” role. - 5–8 years of experience as a network/system administrator, system engineer, or ISSE. - Proven RMF ability, including at least two years of specialized experience in one or more of the following: - Cloud (prefer Azure or AWS) - CI/CD - Government software development / DevSecOps - IaC - TS / SAP environments - Offensive or defensive cyberspace operations - Auditing and performing control assessments - Understanding RMF as it pertains to classified systems - Solid understanding of the systems development life cycle - Strong verbal, written, interpersonal, and presentation skills; ability to lead/mentor; customer relationship building - Independent and diligent with assigned work - Experience using scanners (e.g., ACAS, Nessus, SonarQube) - Experience integrating technologies and security solutions on information systems - Demonstrated experience taking a package from RMF Step 0–7 and receiving an ATO on at least one system **Preferred Qualifications** - Cloud Security Certifications (e.g., CCSP, Azure Security Engineering Associate, AWS Certified Security—Specialty) - Security Engineering/Architecture Certifications (e.g., CISSP-ISSAP, CISSP-ISSEP, GDSA, FITSP-D) - Software Development Security Certification (e.g., CSSLP) - Orchestration Certification (e.g., CKA, Certified Container Security Expert) - Experience driving continuous improvement
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.