Security Engineer / ISSO Support

4w1 month ago

Simple Technology Solutions

Remote · Full-time · $120,000 – $150,000

About this role

At Simple Technology Solutions, our people are our priority. We offer flexibility to help our team thrive personally and professionally while delivering exceptional solutions to Federal Government clients. Our culture is built on collaboration, continuous learning, and excellence.

STS is looking for a Security Engineer/ISSO Support to join a federal data engineering team. You will serve as the security and privacy authority, protecting highly sensitive financial data. This role ensures the platform meets full spectrum of federal security requirements from design through production.

You will serve as the primary point of contact for ATO activities and implement Zero Trust Architecture per federal mandates. This includes embedding security controls at every layer of the technology stack from storage classifications through IAM roles and network controls.

You will engage with agency privacy and security teams at the start of every new service to assess data classification and privacy requirements, ensuring compliance with FISMA and NIST 800-53. Our culture of collaboration and continuous learning, along with HUBZone incentives, supports your professional growth.

Requirements

US Citizenship is required.
Bachelor's Degree is required.
Minimum of 6 years of position-related experience.
Deep knowledge of the federal ATO process.
Hands-on experience with Zero Trust implementation on AWS.
Expertise with FISMA, NIST 800-53, NIST 800-63, OWASP ASVS Level 2, and federal software supply chain security requirements.
Experience with privacy compliance including the Privacy Act of 1974 and the Federal Records Act.

Responsibilities

Serve as the primary point of contact and subject matter expert for all security assessment and authorization activities; work with the government team in completing the ATO process for integrating new capabilities.
Support the full federal Software Development Lifecycle (SDLC) with integrated security controls.
Implement and continuously maintain Zero Trust Architecture (ZTA) across the platform per federal Zero Trust mandates; ensure security controls are embedded at every layer of the technology stack.
Ensure full compliance with FISMA, NIST 800-53, NIST 800-63, OWASP ASVS Level 2, federal software supply chain security requirements, and all agency-mandated security, privacy, performance, and quality requirements.
Engage with the agency's privacy and security teams and the System Owner at the start of every new service, feature, or dataset design to assess information type, security classification, data retention, and required formal reviews.
Identify and document data collection, usage, storage, retention, and breach notification procedures; ensure compliance with the Privacy Act of 1974 and the Federal Records Act.