Information Systems Security Engineer (Principal)

Location: US-VA-McLean; work is performed from the Washington, DC area with regular time on site.

Salary: $208K–$299K annually.

Company

Snowflake develops a cloud data platform and classified national security deployments for US government customers.

What you will do

• Lead security control assessments from control selection and tailoring through evidence collection and authorization.
• Prepare and maintain assessment plans, evidence collection schedules, control status, and residual risk for the authorizing official.
• Direct engineers and security staff producing control artifacts, review evidence, and identify gaps before assessment.
• Explain control implementations to government security reviewers and translate findings into actionable engineering requirements.
• Track authorization status and blockers and report weekly to engineering leadership and the program.

Requirements

• Experience taking at least one system through authorization to operate under NIST 800-53/RMF, FedRAMP, or DoD RMF and its Impact Levels, with ownership of the relevant package.
• Ability to assess engineering implementations, map them to security controls, and determine the evidence they produce.
• Experience working with government authorizing officials or security control assessors and understanding rejected evidence and findings.
• Ability to document assessment scope, control status, evidence gaps, and residual risk so the team can execute from the documentation.
• Eligible for TS/SCI with a full-scope polygraph or already holding this clearance.

Culture & Benefits

• The role works within national security engineering and participates in weekly engineering and security cadences.
• Engineers and supporting security staff produce artifacts while the ISSE determines requirements, reviews evidence, and owns the result.
• Regular on-site work is required in the Washington, DC area.
• Snowflake emphasizes experimentation, low-ego collaboration, challenging ordinary thinking, and rapid innovation.