authorization-to-operate jobs in San Diego

Network Engineer III will design, implement, and maintain enterprise network infrastructure for a DoD environment, configuring and troubleshooting routers, switches, firewalls, and security devices. The role requires hands-on expertise in TCP/IP, OSPF, VLANs, IPsec, and network segmentation, with responsibility for vulnerability remediation, STIG compliance, and RMF requirements.…See more The engineer will coordinate cross-functional teams to resolve connectivity and interoperability issues, maintain network documentation and baselines, and support system integrations and upgrades in classified or highly regulated DoD networks. A Secret-level DoD security clearance is required, along with 5–7 years of progressive network engineering experience and Security+ certification.

As an Information System Security Manager, you will oversee cybersecurity and operations of multiple classified systems, managing personnel and developing enterprise-wide RMF-based information security policies, standards, and procedures. You will maintain compliance with federal and DoD security standards, create and maintain System Security Plans, conduct continuous monitoring, perform risk assessments, and investigate security incidents.…See more You will coordinate with ISSEs, ISAs, and other security roles to design, procure, build, and accredit complex networks and systems across multiple classification levels. Required: Bachelor's degree in Information Security/IT or equivalent with 10+ years experience, DoD 8570.01-M IAM level III certification (CISSP, CISM, GSLC, or CCISO), RMF and NIST 800-53 expertise, and an active TS/SCI clearance.

Lead the design and implementation of advanced security capabilities within Microsoft Azure Government, driving technical workstreams across Azure security architecture, Microsoft Sentinel, Defender, Azure Policy, identity, logging, and Infrastructure as Code. You will architect cloud security solutions, modernize security data and logging architectures, automate configuration-drift detection and response, and guide a small engineering team from concept through operational adoption.…See more The role requires 5+ years of Azure security engineering experience, expertise with Azure Government, Sentinel, Defender, Azure Monitor, Terraform, and cloud identity platforms, plus the ability to move between architecture and hands-on engineering work.

The Cybersecurity Engineer will coordinate cybersecurity activities including preparation and maintenance of Risk Management Framework (RMF) artifacts, risk and vulnerability assessments across network/system/application domains, and day-to-day cyber operations. The role requires performing compliance testing, implementing security controls and policies, working with tools like eMASS and ACAS, and developing security documentation for DoD/government systems up to TS/SCI classification.…See more The candidate must work independently, identify risks and devise mitigation solutions, and communicate findings to both technical and non-technical stakeholders. A bachelor's degree and DoD 8140 qualification (equivalent to former DoD 8570 IAT II) are required, along with 3+ years in cybersecurity, T&E, or Authorization & Accreditation roles.

The Information System Security Officer (ISSO) serves as a steward of classified and high-side information systems, ensuring security compliance and operational resilience in accordance with DoD and DCSA standards. The role involves executing Risk Management Framework (RMF) activities, pursuing Authorization to Operate (ATO) via eMASS, conducting vulnerability scanning with tools like Nessus, and maintaining compliance with NISP and federal requirements.…See more Responsibilities include hands-on system administration, security monitoring, patch management, data transfer operations, and collaborative work with industrial security teams to integrate technical and administrative controls. Success requires proven experience processing ATO packages, system administration skills, security compliance knowledge, and the ability to balance rigorous security controls with operational effectiveness.