Principal Information System Security Engineer (ISSE)

Clarity Innovations is a trusted national security partner, dedicated to safeguarding our nation’s interests and delivering innovative solutions that empower the Intelligence Community (IC) and Department of Defense (DoD) to transform data into actionable intelligence, ensuring mission success in an evolving world.

Our mission-first software and data engineering platform modernizes data operations, utilizing advanced workflows, CI/CD, and secure DevSecOps practices. We focus on challenges in Information Warfare, Cyber Operations, Operational Security, and Data Structuring, enabling end-to-end solutions that drive operational impact.

We are committed to delivering cutting-edge tools and capabilities that address the most complex national security challenges, empowering our partners to stay ahead of emerging threats and ensuring the success of their critical missions. At Clarity, we are people-focused and set on being a destination employer for top talent, offering an environment where innovation thrives, careers grow, and individuals are valued. Join us as we continue to lead innovation and tackle the most pressing challenges in national security.

Job Title: Information Systems Security Engineer (ISSE)
Location: Remote
Job Type: Full-Time
Clearance Level: Must be clearable to DoD Secret (clearable to DoD Top Secret is a plus, no active clearance is required at onboarding).
Certification Requirements: DoD 8570 & 8140 Certification Compliance

Position Overview:

We are seeking an experienced Information Systems Security Engineer (ISSE) with a robust background in Governance, Risk Management, and Compliance (GRC) and Risk Management Framework (RMF) processes for DoD contracts. The ideal candidate will have extensive experience working with NIST 800-53 controls, STIGs, and SRGs, and will also have expertise in Cloud Service Provider (CSP) security, specifically within AWS, as well as Azure and GCP environments. The candidate should be skilled in creating policies around critical security areas such as PII, Incident Response Plans (IRP), Concept of Operations (ConOps), and Continuous Monitoring (ConMon), etc..

In addition to GRC and cloud security, this role requires hands-on experience in DevSecOps tooling, including building and maintaining GitLab and GitHub CI/CD pipelines, configuring and troubleshooting builds, implement security tooling into the pipeline, performing code reviews, and integrate security into the development lifecycle with the development and engineering teams. The ISSE must also be familiar with SIEM configuration, log filtering, security event response, and to a limited extent purple teaming activities, providing broad cybersecurity support across various technical domains.

The ISSE must be clearable to at least DoD Secret and be able to provide evidence of compliance with DoD 8570 and/or DoD 8140 certification requirements.

Responsibilities:

• Governance, Risk, and Compliance (GRC):
• Lead and support RMF processes for DoD contracts, ensuring compliance with NIST 800-53, security STIGs, SRGs, and other applicable standards.
• Create and maintain security policies and procedures for areas like PII, Incident Response (IRP), Concept of Operations (ConOps), and Continuous Monitoring (ConMon), as well as other policy documents needed to support the RMF and GRC process..
• Assist in the development of system security plans (SSPs) and ensure ongoing assessment and monitoring of compliance with security controls.
• Cloud Security & Cloud Service Providers (CSP):
• Implement and manage security controls in AWS, with experience in Azure and GCP environments being a plus.
• Configure and manage cloud security tools and services, including but not limited to IAM, CloudTrail, GuardDuty, and Config in AWS.
• Ensure cloud systems comply with applicable DoD and NIST 800-53 standards, integrating security best prac