Information System Security Engineer (ISSE)

Akima Data Management (ADM) is seeking a highly skilled and mission‑driven Information System Security Engineer (ISSE) to design, engineer, and validate cybersecurity capabilities across Department of War (DoW) Office of Inspector General (OIG) information systems. The ISSE will ensure systems are architected, implemented, and sustained in alignment with federal, DoD, and organizational cybersecurity requirements.

This role integrates security engineering into the full system lifecycle—requirements, design, development, testing, deployment, and continuous monitoring. The ideal candidate brings deep technical expertise, strong understanding of cybersecurity engineering frameworks, and the ability to collaborate across engineering, operations, leadership, and external stakeholders.

This position is essential to safeguarding OIG’s mission‑critical systems and ensuring secure, resilient, and compliant operations across the enterprise. This role is based in Alexandria, VA, supporting the Cybersecurity Division. The ISSE plays a critical role in ensuring the confidentiality, integrity, and availability of DoW OIG’s systems and data while enabling mission success through secure, resilient engineering practices.

Responsibilities

Define, refine, and validate security requirements based on mission objectives, threat assessments, risk analyses, and applicable cybersecurity policies, standards, and frameworks. Design and implement secure system architectures, data flows, and engineering solutions aligned with NIST, DoD, FedRAMP, and Zero Trust principles.

Develop security engineering artifacts, interface control documents, system security plans (SSPs), and technical documentation supporting RMF authorization and accreditation activities. Conduct security architecture reviews, threat modeling, vulnerability assessments, and security impact analyses for on-premises, cloud, and hybrid environments.

Lead cloud vulnerability management efforts, including vulnerability scanning, assessment, prioritization, remediation tracking, and risk reporting across enterprise cloud platforms. Develop, review, and maintain cybersecurity policies, standards, procedures, and implementation guidance to ensure compliance with federal, DoD, and organizational requirements.

Engineer and implement security controls, secure configurations, STIGs, SRGs, and baseline hardening requirements across systems, applications, cloud services, and networks. Perform technical control assessments, security testing, validation activities, and control effectiveness reviews to verify compliance and mitigate risk.

Analyze security findings, recommend risk-based mitigation strategies, and support POA&M development, remediation management, and closure activities. Integrate security requirements throughout the System Development Life Cycle (SDLC), ensuring secure coding, configuration management, and deployment practices. Conduct security assessments for system upgrades, patches, cloud migrations, integrations, and infrastructure changes to identify and mitigate potential risks.

Design and support continuous monitoring capabilities, including automated vulnerability scanning, logging, alerting, and security analytics solutions. Provide technical support for incident response, forensic investigations, containment, eradication, and recovery operations. Assess emerging threats, vulnerabilities, cloud technologies, and adversary tactics to strengthen organizational security posture and resilience.

Translate complex security engineering requirements into actionable guidance for system administrators, developers, architects, and operational teams.

Qualifications

Active TOP SECRET with SCI clearance (required). Bachelor’s degree and 5–10 years of relevant experience, or 10+ years in lieu of a degree. IAM Level III certification (e.g., CGRC, CASP+ CE, CISSP, CISM) required; IAT Level III preferred. Strong understanding of NIST, FISMA, DoD, and organizational cybersecurity engineering frameworks.

Vulnerability Management and Policy Writing Experience. Experience with security architecture, RMF engineering activities, and secure system design. Strong communication, analytical, and documentation skills. Job ID 2026-27178 Work Type On-Site Pay Range $180K to $190K Benefits Regular

• The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits. Paid Time Off (PTO) is offered to regular full-time and part-time employees. Company Description Work Where it Matters Akima Data Management (ADM), an Akima company, is not just another federal IT contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska. At ADM, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States. For our shareholders, ADM provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years. For our government customers, ADM delivers agile and innovative cloud and IT services and solutions that enable mission dominance. As an ADM employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options. Define, refine, and validate security requirements based on mission objectives, threat assessments, risk analyses, and applicable cybersecurity policies, standards, and frameworks. Design and implement secure system architectures, data flows, and engineering solutions aligned with NIST, DoD, FedRAMP, and Zero Trust principles. Develop security engineering artifacts, interface control documents, system security plans (SSPs), and technical documentation supporting RMF authorization and accreditation activities. Conduct security architecture reviews, threat modeling, vulnerability assessments, and security impact analyses for on-premises, cloud, and hybrid environments. Lead cloud vulnerability management efforts, including vulnerability scanning, assessment, prioritization, remediation tracking, and risk reporting across enterprise cloud platforms. Develop, review, and maintain cybersecurity policies, standards, procedures, and implementation guidance to ensure compliance with federal, DoD, and organizational requirements. Engineer and implement security controls, secure configurations, STIGs, SRGs, and baseline hardening requirements across systems, applications, cloud services, and networks. Perform technical control assessments, security testing, validation activities, and control effectiveness reviews to verify compliance and mitigate risk. Analyze security findings, recommend risk-based mitigation strategies, and support POA&M development, remediation management, and closure activities. Integrate security requirements throughout the System Development Life Cycle (SDLC), ensuring secure coding, configuration management, and deployment practices. Conduct security assessments for system upgrades, patches, cloud migrations, integrations, and infrastructure changes to identify and mitigate potential risks. Design and support continuous monitoring capabilities, including automated vulnerability scanning, logging, alerting, and security analytics solutions. Provide technical support for incident response, forensic investigations, containment, eradication, and recovery operations. Assess emerging threats, vulnerabilities, cloud technologies, and adversary tactics to strengthen organizational security posture and resilience. Translate complex security engineering requirements into actionable guidance for system administrators, developers, architects, and operational teams. Active TOP SECRET with SCI clearance (required). Bachelor’s degree and 5–10 years of relevant experience, or 10+ years in lieu of a degree. IAM Level III certification (e.g., CGRC, CASP+ CE, CISSP, CISM) required; IAT Level III preferred. Strong understanding of NIST, FISMA, DoD, and organizational cybersecurity engineering frameworks. Vulnerability Management and Policy Writing Experience. Experience with security architecture, RMF engineering activities, and secure system design. Strong communication, analytical, and documentation skills.