Information Security Engineer

Exostar - Herndon, VA

Hiring: Information Security Engineer Company: Exostar Location: Herndon, VA Job Posted Time: 2026-09-17 13:53:05 Target Skills & Keywords : Agile, Azure AD, CI/CD, Confluence, DNS, FedRAMP, IAM, Java, Jira, OIDC, OWASP, PKI, SAML, SOC 2, TLS, VPN About the job Experience: •5+ years of hands-on experience evaluating secure architecture and implementing security controls in cloud environments. Required Skills: •This role is ideal for candidates that have a skillset focused on engineering credibility, architectural judgment, and the ability to operate confidently with technical teams, auditors, customers, and leadership. •Assess, design, and provide guidance on secure architecture for cloud environments, including IAM, PKI, access, network, and platform services. •Engage directly with infrastructure, platform, and development teams to translate security requirements into implementable technical designs and controls. •Review proposed system changes, architecture diagrams, network flows, identity integrations, and control implementations for security implications. •Develop technical control implementation guidance, including diagrams, control narratives, configuration expectations, and test procedures. •Provide hands-on engineering support for control effectiveness through configuration review, evidence inspection, technical testing, log review, and remediation verification. •Perform threat modeling and security risk assessments and coordinate actionable mitigation strategies. •Provide engineering support for controls aligned to frameworks such as PKI, identity certification, CMMC L2, FedRAMP Moderate, ISO/IEC 27001, IAM, SOC 2, etc. Qualifications: •You are a great fit for this role if you •In-depth knowledge of network security concepts, including segmentation, firewalls, proxies, DNS, TLS, VPN/IPSec, routing, ingress/egress control, and secure network design. •Demonstrated experience authoring technical control narratives, technical audit documentation, and supporting evidence. •Strong written and verbal communication skills with the ability to explain technical concepts to auditors, leadership, and business stakeholders. •Significant experience using Jira and Confluence. •Demonstrated capacity to pass background investigation to attain and maintain Trusted Role access to company systems. •You are exactly who we are looking for if you •CMMC CCA or CCP certification. Compensation: •Competitive benefits and rewards package Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!