Information Systems Security Engineer

Zachary Piper Solutions is seeking an Information Systems Security Engineer (ISSE) to design and secure production cloud environments that host applications for federal defense missions. You’ll work with solutions architects and customer engineering teams to build security into cloud designs and translate those decisions into controls, documentation, and evidence for DoD authorization.

This is a full-time, direct-hire, remote position. Candidates must reside in an approved hiring hub: Washington, DC / Maryland / Virginia or Denver / Colorado Springs, CO. An active Secret security clearance is required.

Responsibilities for the Information Systems Security Engineer include:

• Design and secure production workloads across AWS, Azure, and Google Cloud. Define network segmentation, account structures, encryption and key management, logging, and monitoring.
• Architect identity and access management solutions for single sign-on, federation, MFA, role- and attribute-based access, and privileged access. Integrate DoD PKI and Common Access Card authentication in line with DoD ICAM and Zero Trust principles.
• Create and maintain authorization boundary, network architecture, and data-flow diagrams that document trust boundaries, ports, protocols, and the movement of controlled unclassified information (CUI) and other sensitive data.
• Translate architecture decisions into Risk Management Framework (RMF) artifacts, including System Security Plan (SSP) sections, control narratives for access control, identification and authentication, communications protection, and auditing, and Ports, Protocols, and Services Management (PPSM) registrations.
• Evaluate proposed designs and services against NIST SP 800-53, the DISA Cloud Computing Security Requirements Guide (SRG), STIGs, and FedRAMP requirements. Recommend alternatives when a design does not meet applicable controls.
• Assess the security impact of architecture changes, new services, and customer integrations. Document significant changes and advise ISSMs and ISSOs on boundary updates and potential reauthorization.
• Work with solutions architects and customer teams from onboarding through deployment to incorporate security and authorization requirements into application designs and cloud migrations.
• Implement cloud security monitoring, workload protection, and vulnerability management. Help engineering teams validate controls, resolve findings, and maintain authorization evidence.
• Build infrastructure-as-code guardrails and compliance-as-code checks that enforce controls and collect evidence across cloud environments, containers, Kubernetes, and CI/CD pipelines.
• Serve as the technical point of contact during assessments, readiness reviews, and audits. Explain architecture, identity flows, and control implementation to Security Control Assessors and Authorizing Officials.
  
  

Compensation for the Information Systems Security Engineer includes:

• Salary Range: $200,000–$210,000 per year, depending on experience.
• Additional Compensation: Potential eligibility for equity awards and a discretionary bonus.
• Full Benefits Package: 100% employer-paid medical, dental, and vision coverage for employees and dependents; 401(k) with a 3% company contribution; flexible PTO and paid federal holidays; parental leave; wellness and family planning benefits; a new hire technology and home office stipend; an annual professional development stipend; and an employee referral bonus program.
  
  

This job opens for applications on 11/13/2026. Applications will be reviewed on a rolling basis, and the position will remain open until filled.

Keywords: Information Systems Security Engineer, ISSE, Cloud Security Engineer, Cloud Security Architect, Cloud IAM Engineer, Identity Security Engineer, Security Architecture, Production Cloud Security, AWS Security, AWS GovCloud, Azure Security, GCP Security, DoD Cloud Security, IL4, IL5, IL6, VPC, VNet, Network Segmentation, Cloud IAM, AWS IAM, Azure RBAC, GCP IAM, DoD ICAM, SAML, OIDC, OAuth 2.0, SSO, MFA, RBAC, ABAC, PAM, DoD PKI, CAC, Zero Trust, KMS, HSM, GuardDuty, Security Hub, CloudTrail, Defender for Cloud, Kubernetes Security, DevSecOps, CI/CD Security, Terraform, CloudFormation, AWS CDK, Infrastructure as Code, Compliance as Code, RMF, ATO, eMASS, NIST SP 800-37, NIST SP 800-53, SSP, PPSM, Security Impact Analysis, Authorization Boundary, Data-Flow Diagrams, CUI, DISA Cloud SRG, STIGs, FedRAMP, IASAE Level II, CISSP, CASP+, CSSLP, AWS Security Specialty, AZ-500, Google Professional Cloud Security Engineer, Active Secret Clearance, Remote ISSE, DMV, Denver, Colorado Springs