> Markdown version of [/jobs/ext/3030317-information-systems-security-engineer](https://www.wearedevelopers.com/jobs/ext/3030317-information-systems-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Engineer - **Company:** Bespoke Technologies, Inc. - **Location:** Reston, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Audit Trail, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Databases, Key Management, Oracle (Applications), Ansible, Zero Trust Network Access, Security Software, Security Information and Event Management, Data Streaming, Systems Architecture, Software Vulnerability Management, EndPointSecurity, Data Logging, Scripting, Cloud Platform System, Terraform, Oracle Cloud Infrastructure, Security Orchestration, Automation & Response - **Published:** September 22, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9185194/information-systems-security-engineer ## About the Role * Demonstrated experience engineering, implementing, and assessing security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and agency assessment and authorization (A&A) processes. * Proven hands-on experience securing Cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities. * Experience translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs. * Experience developing and maintaining A&A artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages. * Ability to assess control implementation and effectiveness; identify security gaps and residual risk; recommend remediation; and track corrective actions to closure with technical teams and stakeholders. * Experience applying Zero Trust principles, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices to cloud and hybrid architectures. * Experience performing security engineering activities across the system lifecycle, including requirements analysis, architecture and design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition. * Ability to collaborate effectively with cloud, network, application, database, cybersecurity, Oracle, and Government stakeholders and communicate technical security risks, decisions, and compliance status clearly. * Strong written and verbal communication skills, including the ability to produce security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings. * 8+ years relevant experience to this position Desired Skills: * Associate- or Professional-level cloud certification in Security, Architect, Networking, or Cloud Operations. * Experience supporting classified, Intelligence Community, Government, or other highly regulated systems with TS/SCI security requirements. * Experience with vulnerability-management, configuration-compliance, SIEM, SOAR, endpoint-security, and cloud-security-posture-management tools and processes. * Experience with infrastructure as code and automated security configuration, including Terraform, OCI Resource Manager, Ansible, APIs, or scripting. * Experience supporting security assessments, authorization decisions, control validation, audit readiness, and continuous-monitoring activities in an agency environment. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)