[Remote] Security Engineer/ISSO Support

Note: The job is a remote job and is open to candidates in USA. Simple Technology Solutions is a company that prioritizes its people and offers flexibility to help them thrive while delivering exceptional solutions to Federal Government clients. They are seeking a Security Engineer/ISSO Support specialist to serve as the security and privacy authority on a federal data engineering program, protecting sensitive financial data and ensuring compliance with federal security requirements.ResponsibilitiesServe as the primary point of contact and subject matter expert for all security assessment and authorization activities; work with the government team in completing the ATO process for integrating new capabilities and support the full federal Software Development Lifecycle (SDLC)Implement and continuously maintain Zero Trust Architecture (ZTA) across the platform per federal Zero Trust mandates; ensure security controls are embedded at every layer of the technology stack from storage classifications through IAM roles, network controls, and application securityEnsure full compliance with FISMA, NIST 800-53, NIST 800-63, OWASP ASVS Level 2, federal software supply chain security requirements, and all agency-mandated security, privacy, performance, and quality requirementsEngage with the agency's privacy and security teams and the System Owner at the start of every new service, feature, or dataset design to assess information type, security classification, data retention, and whether a System of Records Notice (SORN), Privacy Impact Assessment (PIA), or other formal review is requiredIdentify and document what data is collected and why, how it is used and shared, how it is stored and secured, how long it is retained, and how users will be notified in the event of a security breach; ensure compliance with the Privacy Act of 1974 and the Federal Records ActEnsure all code submitted to production is free of medium- and high-level static and dynamic security vulnerabilities per OWASP ASVS Level 2; integrate OWASP ZAP, SAST tools, government-provided container analysis tools, and dependency analysis into the CICD pipeline as part of the Definition of DoneEnsure security scans are conducted at least once per sprint; review, document, and explain all false positives; ensure scan results are visible in the team performance dashboardManage AWS IAM role configurations and naming standards; maintain Secrets Manager credential management and certificate validity across all environmentsUse CloudWatch logging, CloudTrail, and AWS Config to ensure the production environment remains consistent, controllable, and auditableEnsure compliance with federal AI governance requirements for all AI/ML platform components; ensure compliance with the Trusted Internet Connections (TIC) Initiative, Section 508, and the 21st Century Integrated Digital Experience ActCollaborate with the IV&V team and agency security staff to continuously improve the platform's security posture; support resolution of all security findings within contractually required timelinesParticipate in 2-week sprint ceremonies, quarterly PI planning, and agile delivery using JIRA and GitHubSkillsUS Citizenship is requiredBachelor's Degree is requiredMinimum of 6 years' position related experience is requiredBachelor's degree or higher in Cybersecurity, Information Systems, Computer Science, or a related field6+ years of experience in federal information security with demonstrated experience in an ISSO role or ATO-leadership capacity at a civilian federal agency; financial regulatory agency experience strongly preferredDeep working knowledge of FISMA, NIST 800-53, NIST 800-63, and the full federal ATO/SDLC processHands-on experience implementing Zero Trust Architecture on AWS in a FedRAMP-authorized environment including IAM hardening, network segmentation, and application-layer security controlsExperience with OWASP ZAP, SAST/DAST tooling, dependency analysis, and container security scanning integrated into CI/CD pipelinesFamiliarity with AWS security services: IAM, Secrets Manager, CloudWatch, CloudTrail, AWS Config, and S3 bucket policy and sensitivity classification managementExperience conducting or supporting Privacy Impact Assessments (PIAs) and System of Records Notices (SORNs)Knowledge of the Privacy Act of 1974, Federal Records Act, Section 508, the 21st Century IDEA Act, and applicable federal Zero Trust, AI governance, software supply chain, and TIC mandatesExperience managing security for systems handling non-public, highly sensitive financial or regulatory dataStrong written and verbal communication skills; ability to produce authoritative security documentation including PIAs, ATO packages, and OWASP false positive documentationExperience in agile federal environments with sprint-based delivery, JIRA, and GitHubMust be able to work 8am-5pm Eastern Time regardless of home locationActive federal public trust suitability determination or ability to obtain one requiredMust be a U.S. citizenBenefitsFlexibility to help them thrive personally and professionallySpecial incentives for team members living in qualified HUBZonesCompany OverviewSimple Technology Solutions is a federal-focused digital strategy consultancy. It was founded in 2013, and is headquartered in Washington, District of Columbia, USA, with a workforce of 51-200 employees. Its website is https://www.simpletechnology.io.