Mid-Level Information Systems Security Engineer

- Design and implement secure IT and cloud solutions in Microsoft Azure and Amazon Web Services (AWS) - Integrate security requirements throughout the system development life cycle, particularly in application development and deployment pipelines - Create and evaluate secure system and cloud architectures, including Azure VNets, NSGs, Azure Firewall, Private Endpoints, and AWS VPCs, subnets, route tables, security groups, and network ACLs - Provide technical and engineering assistance to Information System Security Officers (ISSOs) conducting Risk Management Framework (RMF) and Authorization and Accreditation (A&A) activities - Conduct security impact assessments for system, architecture, application, and configuration changes - Execute threat modeling to identify, analyze, and mitigate risks related to application and infrastructure design changes - Carry out Supply Chain Risk Management (SCRM) activities in alignment with NIST SP 800-161 - Assess SaaS, applications, and government solutions for compliance with NIST, FedRAMP, and federal security requirements - Implement application security best practices, including secure coding principles, dependency management, and vulnerability remediation - Support DevSecOps methodologies by incorporating security controls, scanning, and monitoring into Continuous Integration/Continuous Deployment (CI/CD) pipelines - Apply security best practices to Kubernetes, containers, and Infrastructure as Code (Terraform) - Contribute to documentation of security architecture, technical standards, and risk-based recommendations