Job description

PLEX Solutions, A Part of Markon, is looking for an Information System Security Engineer (ISSE) to support a position in Annapolis Junction, MD. The Information Systems Security Engineer (ISSE) serves as the on-site technical lead responsible for deploying, maintaining, and supporting a customer's TECTIX instance while supporting the security engineering and authorization workload the platform is built to accelerate. TECTIX is an AI/ML-enabled Risk Management Framework (RMF) automation platform. This role integrates system security engineering with hands-on IT deployment, so the ideal candidate reasons fluently about NIST 800-53 control implementation and the RMF authorization lifecycle while remaining comfortable standing up containerized infrastructure in the customer environment. The engineer is the customer's primary point of contact for the platform and the interface between the customer environment and the TECTIX development team. Security Engineering and Authorization • Perform and review technical security assessments of the computing environment to identify vulnerabilities and non-compliance with established Information Assurance standards, and recommend mitigation strategies. • Validate and verify system security requirements, and establish and maintain system security designs across networking, computing, and enclave environments, including enclaves with differing data protection and classification requirements. • Build Information Assurance into systems deployed to operational environments, and support the customer's security architecture and the trusted relationships among connected systems. • Assess and mitigate system security threats and risks throughout the program life cycle, and contribute to security planning, risk analysis, and risk management activities. • Support security authorization activities in compliance with the DoD Risk Management Framework and the NIST RMF process, and review certification and accreditation documentation for completeness and compliance. TECTIX Deployment • Install, configure, and validate TECTIX in the customer environment across the supported deployment paths, including AWS GovCloud and on-premises or disconnected installations. • Provision and configure supporting services, including containers and required managed database resources. • Execute and verify installation against the user’s guide and industry best practices, and document environment-specific deviations back to the product team. Maintenance and Sustainment • Apply platform updates, patches, and configuration changes on a defined cadence with minimal disruption to the customer, under disciplined configuration and change control. • Maintain STIG compliance for the deployment, including a workable STIG update approach for disconnected environments. • Monitor container, database, and application health, and remediate issues before they affect users. • Manage vulnerability scan results, software bill of materials (SBOM) validation, and integrity hash verification as part of ongoing security posture upkeep. RMF Tooling and Customer Support • Support the customer's use of TECTIX to produce and maintain RMF artifacts, including System Security Plans, control implementation statements, POA&Ms, and assessment evidence. • Assist with eMASS integration and data flows between TECTIX and the customer's authorization tooling. • Provide Tier 1 and Tier 2 support to customer users, deliver user training, and maintain customer-facing operational documentation. • Capture enhancement requests and defects, and coordinate resolution with the TECTIX development team • Active TS/SCI with a current CI polygraph. • Demonstrated depth in the RMF authorization lifecycle, including NIST 800-37, NIST 800-53, security control assessment, and certification and accreditation review. • System security engineering experience across networking, computing, and enclave environments, including environments with differing classification levels. • Solid IT engineering background, including Linux system administration, basic networking, and comfort operating in a command-line environment. • Working software aptitude sufficient to read logs, interpret configuration files, understand containerized applications, and troubleshoot deployment issues. • Strong customer service and communication skills, with the ability to translate between technical detail and customer stakeholders. • DoD 8140/8570 IAM or IAT baseline certification appropriate to the task order at time of hire (for example, Security+ at minimum). Desired Qualifications: • CISSP, CGRC (formerly CAP), or equivalent RMF/GRC certification. • Hands-on experience with GRC or authorization tooling such as eMASS, Xacta, or similar. • AWS GovCloud experience, including ECS/Fargate, and container tooling such as Docker and Docker Compose. • PostgreSQL administration and general database troubleshooting. • STIG and SCAP experience, container hardening, and vulnerability management workflows. • Prior experience supporting an Intelligence Community or DoD customer in a classified environment. USD $185,000.00 - USD $225,000.00 /Yr. The Markon pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. Eager to join a team where your skills are valued, your growth is nurtured, and your impact is profound? Look no further than Markon, a premier consulting firm deeply dedicated to advancing our nation's most critical missions. At Markon, we don't just offer jobs – we offer opportunities for personal and professional transformation. Empowering our employees to lead, innovate, and excel, we foster an environment where new ideas are not just welcomed but celebrated. As a perennial Washington Post Top Workplace, we prioritize the well-being and success of our team members, ensuring they can bring their best selves to work. Headquartered in Falls Church, Virginia, Markon has garnered national recognition for our unwavering dedication to excellence in serving the intelligence community, as well as federal civilian and defense agencies. Our growing reach extends across 17 states, 116 countries, and 5 continents, where our team of dynamic professionals collaborates to deliver unparalleled program and project management services. Markon values people and the tremendous impact each individual can make – which is why we’re consistently recognized as one of the best places to work in federal government consulting. Here, you can help solve the nation’s most important challenges, surrounded by colleagues who help you grow, advance, and succeed. We are deeply dedicated to what matters – bringing out the best in each other to advance our clients’ missions. Join us and make a meaningful impact. Markon is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, national origin, age, protected veteran status, or disability status. This job posting will remain open until the position is filled. Benefits Offered : Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Flexible Spending Accounts, EAP, Training and Tuition Assistance, Paid Time Off, and Holidays.

Requirements

Must-haves

Security Engineering and Authorization
• Perform and review technical security assessments of the computing environment to identify vulnerabilities and non-compliance with established Information Assurance standards, and recommend mitigation strategies.
• Build Information Assurance into systems deployed to operational environments, and support the customer's security architecture and the trusted relationships among connected systems.
• Assess and mitigate system security threats and risks throughout the program life cycle, and contribute to security planning, risk analysis, and risk management activities.
• Support security authorization activities in compliance with the DoD Risk Management Framework and the NIST RMF process, and review certification and accreditation documentation for completeness and compliance.
TECTIX Deployment
• Install, configure, and validate TECTIX in the customer environment across the supported deployment paths, including AWS GovCloud and on-premises or disconnected installations.
• Provision and configure supporting services, including containers and required managed database resources.
• Execute and verify installation against the user’s guide and industry best practices, and document environment-specific deviations back to the product team.
Maintenance and Sustainment
• Apply platform updates, patches, and configuration changes on a defined cadence with minimal disruption to the customer, under disciplined configuration and change control.
• Maintain STIG compliance for the deployment, including a workable STIG update approach for disconnected environments.
• Monitor container, database, and application health, and remediate issues before they affect users.
• Manage vulnerability scan results, software bill of materials (SBOM) validation, and integrity hash verification as part of ongoing security posture upkeep.
RMF Tooling and Customer Support
• Support the customer's use of TECTIX to produce and maintain RMF artifacts, including System Security Plans, control implementation statements, POA&Ms, and assessment evidence.

Nice-to-haves

• CISSP, CGRC (formerly CAP), or equivalent RMF/GRC certification.
• Hands-on experience with GRC or authorization tooling such as eMASS, Xacta, or similar.
• AWS GovCloud experience, including ECS/Fargate, and container tooling such as Docker and Docker Compose.
• PostgreSQL administration and general database troubleshooting.
• STIG and SCAP experience, container hardening, and vulnerability management workflows.
• Prior experience supporting an Intelligence Community or DoD customer in a classified environment.
USD $185,000.00 - USD $225,000.00 /Yr.
Join us and make a meaningful impact.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aimlawsdocker

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off