Security Engineer

Overview TSGi is seeking a Security Engineer to support a large-scale federal travel and expense modernization initiative serving civilian government agencies. This role will be responsible for implementing and maintaining security controls across a cloud-based environment, supporting compliance requirements, and protecting mission-critical systems and data. The ideal candidate will bring hands-on experience securing FedRAMP or FISMA Moderate environments, strong AWS GovCloud knowledge, and the ability to translate technical security decisions into compliance-ready documentation. Candidates local to Herndon, VA are preferred and will be expected to work onsite four (4) days per week . Fully remote candidates will also be considered; however, West Coast candidates will not be considered . Per our Federal government contract, candidates must be U.S. Citizens able to obtain a Public Trust Clearance. Responsibilities Design, implement, and maintain security controls across cloud and application environments. Monitor systems for suspicious activity and investigate security alerts and incidents. Lead incident response activities, including containment, remediation, recovery, and post-incident analysis. Support vulnerability management, system hardening, patch management, and configuration compliance efforts. Review automation workflows, scripts, and system changes to ensure adherence to secure development practices. Collaborate with engineering and compliance teams to document security controls and support authorization and assessment activities. Prepare security reports and recommendations for technical and business stakeholders. Qualifications 5+ years of security engineering experience supporting FedRAMP or FISMA Moderate systems in an AWS GovCloud environment. Hands-on experience with UiPath architecture, including Orchestrator, attended and unattended robots, credential stores, queues, and robot host deployments. Experience designing service account strategies, credential vaulting, RBAC, separation of duties, and audit logging controls. Strong knowledge of NIST SP 800-53 Rev. 5 Moderate controls, particularly within the AC, AU, CM, IA, and SC control families. Experience with STIG and CIS hardening, vulnerability scanning, patch management, and configuration management. Experience supporting Secure SDLC processes and conducting code reviews for automation workflows and scripts. Ability to translate technical implementation decisions into security and compliance documentation for assessment and authorization efforts. Strong analytical, troubleshooting, and communication skills. Per our Federal government contract, candidates must be U.S. Citizens able to obtain a Public Trust Clearance. Compensation: W2 Hourly rate starts at $70. Pay rates are based on experience, qualifications, location, and certifications, and are subject to change at any time. Benefits vary by compensation type and may include paid time off (PTO), medical, dental, and vision coverage, life insurance, long-term disability insurance, a 401(k) plan, and additional optional benefits. 4 Reasons to Join The Squires Group, Inc.: 1. Our Commitment to You - We offer competitive pay, multi-year projects, and a list of exciting clients. 2. Work-Life Balance - We work hard; we work smart and have quality time for family and "life." 3. Golden Rule - We treat our consultants the way we want to be treated: with integrity, professionalism, and trust. 4. We Care About You – We help you meet your career goals and continuously support your efforts in the field. Check out our Referral Program! The Squires Group will pay you for every qualified professional that you refer and we place. If you see a position posted by The Squires Group and know the perfect person for the job, please send us your referral. For more information, go to https://bit.ly/squiresreferral. The Squires Group, Inc. is an Equal Opportunity/Affirmative Action Employer. #LI-JK1 #LI-Hybrid