Senior Information System Security Engineer supporting the FBI to design and maintain a scalable framework for categorizing IT systems by risk, architecture, and compliance requirements. This role bridges technical security engineering with labor allocation and cost recovery strategy.
What you'll do
- Design and maintain FBI IT system categorization methodology based on architecture, security classification, FIPS-199 impact levels, hosting environment, CNSS overlays, and mission criticality
- Assess complex system architectures, interfaces, and security control implications to determine appropriate ISSO/ISSE support levels and labor mapping
- Conduct security architecture reviews and control implementation analysis across on-premises, Azure, AWS, and hybrid enterprise environments
- Translate technical system attributes and risk profiles into labor category recommendations and staffing rationale
- Support RMF activities including boundary analysis, system interconnection analysis, control inheritance evaluation, and authorization package documentation
- Ensure categorization framework remains compliant with NIST, CNSS, and FBI guidance through continuous review and updates
- Partner with ISSOs, system owners, architects, and program leadership to document technical rationale and enable chargeback/cost recovery reporting
Mission
Agile Defense is contracted to support the FBI's ISSO/ISSE Program Management initiative (Objective 2). The mission focuses on developing repeatable, documented methodologies to differentiate FBI IT systems across traditional, hybrid, and cloud environments to ensure appropriate security oversight and resource allocation aligned with federal and national security standards.
Required skills
- FIPS-199 assessment and categorization
- NIST SP 800-37 RMF implementation
- NIST SP 800-53 control analysis
- CNSS 1253 overlay application
- System security architecture review
- Azure and AWS cloud security
- Security control implementation analysis
- Technical security documentation
- Risk categorization and mapping
- RMF and system authorization packages