Security Engineer (Cloud & Compliance)

Location: Fully remote within the United States; must be legally authorized to work in the US. Visa sponsorship is not available.

Salary: $130,000–$140,000 per year

Company

hirify.global is a consulting company that helps governments and organizations improve public services through technology, communications, data, and human-centered design.

What you will do

• Lead security for a FIPS 199 Moderate federal platform supporting government regulatory planning and review.
• Run vulnerability scans, coordinate remediation and patching, and harden Red Hat, Oracle, Apache/Tomcat, and Java environments.
• Maintain NIST-based assessment and authorization documentation, POA&Ms, contingency plans, incident response plans, and privacy artifacts.
• Perform threat modeling and embed static and dynamic security testing into CI/CD pipelines.
• Advise on secure cloud architecture, federated identity, FIPS 140-validated encryption, Zero Trust, and software supply chain security.
• Serve as the client-facing security lead and communicate risks, findings, and remediation progress to technical and non-technical stakeholders.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field.
• At least 5 years of hands-on information security experience, including securing federal systems under FISMA.
• Experience with the NIST Risk Management Framework, NIST SP 800-53 Rev. 5 Moderate controls, A&A documentation, and supporting systems through ATO.
• Experience with vulnerability scanning, Linux and relational database hardening, OWASP security practices, and CI/CD security testing.
• Working knowledge of PKI, TLS certificate management, firewalls, network protocols, and application security.
• Ability to obtain and maintain a favorable Public Trust determination and authorization to work in the US.

Nice to have

• CISSP, CISM, CompTIA Security+, or an equivalent certification.
• Experience with GSA security policies, ATO processes, AWS, cloud.gov, Docker, or Kubernetes.
• Familiarity with Zero Trust, NIST SSDF, OMB software security guidance, identity federation, and Login.gov.
• Experience with Grafana, Prometheus, Loki, Splunk, or legacy-to-modern platform migrations.

Culture & Benefits

• People-first culture centered on collaboration, transparency, continuous improvement, and lasting impact.
• Flexible working hours in a fully remote environment.
• 401(k) with matching incentive.
• Medical, dental, vision, flexible spending, short-term disability, and life insurance benefits.
• Paid time off, 11 paid holidays, parental leave, and commuter benefits.