> Markdown version of [/jobs/ext/2105467-subject-matter-expert-iii-information-systems-security-engineer](https://www.wearedevelopers.com/jobs/ext/2105467-subject-matter-expert-iii-information-systems-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Subject Matter Expert III - Information Systems Security Engineer - **Company:** OneZero Solutions - **Location:** Mechanicsburg, PA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Systems Engineering, Cloud Engineering, Configuration Management, Cyber Security, DevOps, Information Systems Security Architecture Professional, Information Systems Security Engineering Professional, Power BI, Systems Integration, Policy as Code, SC Clearance, Infrastructure Automation Frameworks, Information Technology, Api Design, Software Coding, Restful APIs, Devsecops, Security Orchestration, Automation & Response - **Published:** August 18, 2026 - **Apply:** https://www.dice.com/job-detail/e8f22399-4ee9-41e2-8adb-95f35c5be19f ## About the Role * Bachelor's degree from an accredited institution in Information Technology, Computer Science, Engineering, or a related technical discipline. * One of the following certifications: AWS Certified DevOps Engineer - Professional; AWS Certified Solutions Architect - Professional; AWS Certified Security - Specialty; or (ISC)2 CISSP, preferably with an engineering or architecture concentration (ISSEP/ISSAP). * Twelve (12) years of demonstrated experience in systems engineering and cybersecurity, with at least seven (7) of those years focused on security automation, cloud engineering, and architecture. * Five (5) years of demonstrated experience serving as a lead technical authority on enterprise-level projects, responsible for designing and implementing security solutions, not just assessing them. * Five (5) years of demonstrated experience translating complex regulatory requirements (RMF, NIST, DISA STIGs) and architectural diagrams into functional, automated, and operational code. * Active Secret clearance; U.S. citizenship required. ## Description The Subject Matter Expert III is key personnel serving as the lead Information Systems Security Engineer (ISSE). The role is the lead technical authority for designing, building, and sustaining DSCA's layered security automation architecture in AWS infrastructure provisioning, configuration management, Policy-as-Code compliance validation, and orchestration and for translating DoW regulatory requirements into functional, automated, operational code., * Serving as the lead Information Systems Security Engineer, developing and integrating cybersecurity designs for systems and networks. * Designing, building, and maintaining the layered automation architecture. * Infrastructure Provisioning Layer: developing and maintaining a library of approved, secure Infrastructure-as-Code templates. * Configuration Management Layer: implementing solutions such as AWS Systems Manager to sustain secure configurations. * Compliance Validation Layer: implementing Policy-as-Code capabilities by translating DoW control requirements into automated checks. * Orchestration and Workflow Layer: delivering orchestration to coordinate complex, multi-step security workflows. * Developing and managing the Compliance-as-Code (CaC) framework. * Integrating AWS-native security services for continuous monitoring. * Providing technical support for dashboard and API development, including Power BI dashboards and RESTful APIs that expose standardized, reusable compliance metrics. Knowledge, Skill and Abilities: * Expert-level AWS engineering skill, including AWS-native security services and Systems Manager. * Infrastructure-as-Code and secure baseline template development for repeatable, compliant provisioning. * Policy-as-Code and Compliance-as-Code development, translating DoW control requirements into automated checks. * Security orchestration and workflow automation across multi-step, multi-system processes. * Dashboard and API engineering (e.g., Microsoft Power BI, RESTful APIs) to expose standardized, reusable compliance metrics. * Deep working knowledge of RMF, NIST standards, and DISA STIGs in a DevSecOps delivery model. Ability to act as lead technical authority and to communicate architectural decisions to government stakeholders ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)