Information Systems Security Engineer (Cybersecurity)

Location: Remote, limited to approved hiring hubs in DC/Maryland/Virginia or Denver/Colorado Springs, Colorado. U.S. citizenship and an active U.S. Secret security clearance are required.

Base salary: $200,000–$210,000 annually, plus potential equity awards and discretionary bonuses.

Company

hirify.global Systems is a public-benefit software company building secure software delivery capabilities for government and regulated networks.

What you will do

• Own the security architecture and compliance engineering perspective for the Game Warden platform and customer applications.
• Architect IAM solutions across AWS, Azure, and GCP, including federation, MFA, RBAC/ABAC, privileged access, and DoD PKI/CAC authentication.
• Create authorization boundary, network architecture, and data-flow diagrams tracing trust boundaries, protocols, and CUI or sensitive data movement.
• Translate technical architectures into RMF artifacts, SSP sections, control narratives, PPSM registrations, and significant change impact analyses.
• Evaluate cloud services and architecture changes against NIST 800-53, DISA Cloud Computing SRG, STIGs, and FedRAMP requirements.
• Guide customer integrations, assessments, readiness reviews, and audits while advancing Zero Trust, infrastructure-as-code guardrails, and compliance-as-code practices.

Requirements

• 5–8 years of hands-on security engineering, cloud security architecture, or information assurance experience, including at least 4 years securing production workloads in AWS, Azure, or GCP and at least 3 years supporting DoD or federal RMF authorizations.
• Expert knowledge of IAM, including SSO and federation with SAML and OIDC/OAuth 2.0, MFA, RBAC/ABAC, privileged access management, cloud IAM, and DoD PKI/CAC authentication.
• Hands-on experience securing AWS, Azure, and/or GCP environments, including VPC/VNet design, account structure, KMS/HSM, logging and monitoring, native security services, GovCloud, containers, Kubernetes, and CI/CD.
• Ability to produce authorization, architecture, and data-flow diagrams using tools such as Lucidchart, draw.io, or Visio.
• Strong knowledge of NIST 800-37 RMF and NIST 800-53 Rev. 4/5, including control implementations, SSP content, and RMF workflows in eMASS or similar GRC tools.
• Familiarity with DISA PPSM, CAL, DISA Cloud Computing SRG, STIGs, DoD ICAM policy, and the DoD Zero Trust Reference Architecture.
• Active U.S. Secret security clearance, DoD 8570/8140 IASAE Level II baseline certification, and a professional-level cloud certification are required; the certifications may be obtained within 90 days and 6 months respectively.
• Ability to explain complex technical designs to engineering, architecture, compliance, and government stakeholders and produce assessor-ready documentation.
• U.S. citizenship is required.

Nice to have

• Experience with CISSP, CASP+, CSSLP, AWS Certified Security – Specialty, AZ-500, or Google Professional Cloud Security Engineer certifications before joining.

Culture & Benefits

• Full-time remote work within the approved U.S. hiring hubs.
• 100% employer-paid medical, dental, and vision coverage for employees and dependents.
• 401(k) with a 3% company contribution, equity incentive plan, and discretionary bonuses.
• Flexible paid time off, federal holidays, generous parental leave, wellness benefits, and mental health and family planning resources.
• Home office and new-hire technology stipends, annual professional development stipend, and employee referral bonus program.

Hiring process

• Apply through the job page application form; applications are reviewed on a rolling basis until the position is filled.
• Colorado applicants may redact date of birth, attendance dates, and graduation dates from uploaded documents.