Security and Compliance Engineer | Top Secret clearance w/SCI eligibility

Overview

AMERICAN SYSTEMS, a 100% employee-owned government contractor , is seeking a Security and Compliance Engineer to join our Mission Engineering and Integration Team in Arlington, Virginia .

In this role, you’ll help Government and mission teams securely integrate data, applications, partners, and internal capabilities across cloud, on-premises, and hybrid environments , including classified and controlled information systems . You’ll translate complex cybersecurity and compliance requirements into practical, repeatable solutions that support authorization, access control, encryption, monitoring, and audit readiness .

Your work will help enable secure, mission-ready operations while directly supporting important national security objectives .

This job requisition is for potential upcoming work at AMERICAN SYSTEMS and does not represent a current opening. Qualified candidates will be contacted when the work/funding becomes available.

Responsibilities

As a Security and Compliance Engineer with AMERICAN SYSTEMS, you will have an opportunity to do the following:

• Define cybersecurity, compliance, encryption, identity, audit, logging, and monitoring requirements for data ingest, application onboarding, partner access, and IPT integration requests.
• Drive authorization readiness by identifying classification, information domain, releasability, transfer direction, control mapping, evidence, and approval requirements early in the intake process.
• Develop security artifacts for integration architectures, interface control documents, access control plans, cryptographic protection plans, test plans, readiness packages, and authorization packages.
• Assess integration risk across least privilege access, ABAC enforcement, cryptographic protections, monitoring needs, auditability, and data handling obligations.
• Coordinate secure implementation with cross-domain, network, cloud, software, data, and operations teams for CDS, diode, RTB-based CDS, API, broker, streaming, and secure-transfer patterns.
• Validate security controls during build, configuration, testing, authorization, production cutover, and sustainment handoff.
• Collect and organize evidence including vulnerability results, control implementation statements, test results, configuration records, findings, mitigation plans, and readiness artifacts.
• Monitor compliance posture for control drift, access-policy exceptions, audit gaps, configuration concerns, and risks to approved baselines or mission data flows.
• Advise mission stakeholders on secure integration approaches that preserve mission velocity while meeting Government authorization and compliance obligations.

Qualifications

Required Qualifications

• Active Top Secret clearance with SCI and SAP eligibility
• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related discipline, plus 8+ years of related experience
• CompTIA Security+ CE or an equivalent DoD 8140/8570 baseline certification
• ISC2 CGRC ( formerly CAP ) or an equivalent Risk Management Framework (RMF) / Assessment and Authorization (A&A) certification
• Demonstrated knowledge of RMF, ATO support, control mapping, evidence collection, audit readiness, vulnerability management, and risk mitigation
• Experience supporting data movement, application onboarding, partner access, or enterprise integration across cloud, on-premises, and hybrid environments in classified settings
• Working knowledge of ABAC concepts, identity attributes, least privilege, PKI, certificates, key management, secrets handling, logging, monitoring, and audit requirements
• Familiarity with cross-domain solution planning, controlled transfer mechanisms, classification handling, releasability, and multilevel security landing-zone concepts
• Ability to assess technical changes for security impact, implementation risk, testing requirements, rollback considerations, and documentation updates
• Ability to coordinate across software, platform, network, data, operations, security, compliance, mission, and Government teams
• Experience with NIST security controls, vulnerability scanning, STIG compliance, POA&M tracking, and A&A documentation

Helpful to Have

• Relevant DoD cybersecurity or cloud security certifications , including:
• ISC2: CISSP or CCSP
• ISACA: CISM or CISA
• GIAC: GSEC, GCIH, or GCIA
• AWS Certified Security – Specialty
• Azure Security Engineer Associate
• Experience supporting mission application onboarding or enterprise data integration in Special Access Program (SAP) or SCI environments
• Experience with eMASS, Xacta, ACAS/Nessus/Tenable, Splunk, STIG Viewer, SCAP, cloud security services, or DevSecOps security tooling
• Experience preparing compliance evidence for operational readiness reviews, change boards, or authorization milestones