Information Systems Security Engineer

Everforth ECS is seeking an Information Systems Security Engineer to work in our Fort Meade, MD office.

The Information Systems Security Engineer will lead security architecture hardening, vulnerability mitigation, and continuous accreditation for multi-tenant systems operating within a Combined Information Environment (CIE) and Mission Partner Environment (MPE).

In this role, you will be responsible for defining, implementing, and validating technical security controls across hybrid compute infrastructure composed of enterprise virtual machines, container orchestration clusters, and virtual desktop delivery pipelines. You will interface directly with Five Eyes (FVEY) coalition partners, systems architects, ISSMs/ISSOs, and operational

defense personnel to ensure that all data flows, boundary enforcement points, and identity federation services adhere to rigorous DoD security baselines, zero-trust principles, and Risk Management Framework (RMF) standards.

Primary Responsibilities:

• Multi-Domain & Enclave Boundary Defense: Design, enforce, and audit boundary security mechanisms, network access control policies, and cross-domain controls isolating mission-specific enclaves while facilitating secure multilateral information sharing among FVEY mission partners.
• Virtualization & Hypervisor Security: Apply and validate DISA Security Technical Implementation Guides (STIGs) and hardening benchmarks across enterprise hypervisors (VMware vSphere/ESXi), virtual machines, management planes (vCenter), and software-defined storage backends.
• Linux & Endpoint System Hardening: Maintain baseline configuration compliance and host-based security across Red Hat Enterprise Linux (RHEL) server platforms, Windows infrastructure, and enterprise Virtual Desktop Infrastructure (VDI) (VMware Horizon / Citrix), mitigating vulnerabilities across shared and non-persistent virtual pools.
• Continuous Monitoring & Vulnerability Management: Execute automated vulnerability scanning (e.g., Trellix, ACAS), analyze Common Vulnerabilities and Exposures (CVEs), generate Plan of Action and Milestones (POA&Ms), and engineer automated or scripted remediation actions across VM and VDI fleets.
• Accreditation & Documentation: Translate complex infrastructure topologies and system data flows into comprehensive RMF accreditation artifacts (System Security Plans [SSPs], Security Assessment Reports [SARs], Interface Control Documents [ICDs]). Collaborate with Systems Architects to evaluate architectural models (Visio / Cameo SysML) for cybersecurity posture and zero-trust compliance.
• Other duties, as assigned.

Salary 120,000-150,000