Information Systems Security Engineer Senior

Ultra Maritime is a company focused on advancing naval technology and supporting the U.S. Navy and allied forces. They are seeking a hands-on Information Systems Security Engineer Senior to support cybersecurity engineering and compliance for unclassified environments handling Controlled Unclassified Information (CUI), emphasizing NIST SP 800-171 and CMMC Level 2 readiness and sustainment.

Responsibilities:

• Lead implementation and sustainment of NIST SP 800-171 controls and CMMC Level 2 practices
• Develop and maintain compliance artifacts: SSPs, POA&Ms, Asset inventories, boundary definitions, Network and data flow diagrams
• Conduct internal gap assessments and readiness reviews for CMMC
• Support evidence collection and technical walkthroughs during audits
• Translate compliance requirements into actionable technical work items
• Design, implement, and harden on-premise systems supporting CUI environments (Windows/Linux servers, AD/Entra ID hybrid, virtualization, network segmentation)
• Implement and tune technical security controls, including: Identity & access management (MFA, least privilege, RBAC), Endpoint security (EDR, device hardening, patching), Vulnerability scanning and remediation, Centralized logging and monitoring (SIEM), Secure configuration baselines (CIS/STIG-aligned)
• Partner with IT infrastructure to implement network security controls (firewalls, VLANs, NAC, secure remote access)
• Support secure system builds, change management, and incident response in CUI environments
• Help integrate security into on-prem and hybrid architectures (VMware/Hyper-V + cloud where applicable)

Requirements:

• Hands-on experience implementing NIST SP 800-171 controls
• Experience supporting CMMC Level 2 readiness or assessments
• Strong background in on-prem infrastructure security, including Windows and/or Linux server hardening
• Experience with Active Directory or hybrid identity environments
• Experience with virtualized infrastructure (VMware/Hyper-V)
• Experience with network segmentation and firewall policy design
• Experience with security tooling: vulnerability scanners, EDR, SIEM, MFA/IAM, configuration management
• Experience securing environments handling CUI (unclassified)
• Ability to move fluidly between documentation and technical implementation
• Strong communication skills with engineers, IT staff, and leadership
• Experience remediating findings from 800-171 assessments or pre-CMMC readiness reviews
• Experience with hybrid environments (on-prem + cloud)
• Typically, a Bachelor Degree (or equivalent) in Computer Science, Information Technology, Cybersecurity, or a related field with 4+ years of experience
• Familiarity with NIST SP 800-53 and other relevant security standards for classified systems
• CompTIA Security+ certification or equivalent
• Understanding of risk management frameworks used in government environments
• May be required to maintain security clearance