{"id":3747837,"url":"https://alion.io/job/orbisops-staff-security-engineer-top-secret-clearance-required","title":"Staff Security Engineer (Top Secret Clearance Required)","company":{"id":4461375,"name":"Orbisops","domain":"orbisops.com","url":"https://alion.io/company/orbisops","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US","AE","EG","IL","SA","TR","DZ","BH","KM","DJ","IQ","JO","KW","LB","MR","MA","OM","PS","QA","SO","TN","EH"],"hiring_countries_total":22,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bootstrap","optional":false},{"name":"Go","optional":false},{"name":"gRPC","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"OWASP","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-11-03T14:24:09Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-04T19:04:53Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Company Overview\nOrbis is a technology company that delivers sovereign intelligence and decision capabilities to the United States Government and its allies. We convert complex information and operational systems into decisive outcomes, giving public institutions and critical enterprises the tools to move faster, see clearer, and act first in an increasingly contested world.\nWe are not a consulting firm and not a systems integrator. Every Orbis team is built around practitioners who have operated at the mission edge, and every engagement is judged on one thing: whether it produces working capability, not slide decks. Solutions forged from experience; that is how we build, and it is how we hire.\nJob Summary\nOrbis is seeking a Staff Security Engineer to drive the security and trust architecture across Catalyst, our secure multi-cluster service mesh platform. You will set the patterns other engineers follow for authentication, authorization, and tenant isolation. We are looking for someone who has built platform-wide security architecture and wants to set technical direction for a team building critical infrastructure.\nTRAVEL: International travel to Middle East and geopolitical hot zones, up to 25% per calendar year is required. Please apply only if you can meet this requirement.\nKey Responsibilities\nDefine the architecture for Catalyst's authentication and authorization layer (e.g., OIDC, OAuth2, and SAML, RBAC, ABAC models) and help set the patterns other engineers build against\nDrive reliability and security strategy for the trust layer: define SLOs and SLAs for authn/authz latency and availability, lead incident response for credential and access-control incidents, and design for safe revocation under partial failure\nParticipate in on-call and incident response for our data platform including leading post-incident reviews, triage, prevention, and mitigation\nDefine and implement secure-by-default developer patterns and infrastructure primitives to reduce security friction and eliminate common vulnerability classes (e.g., standardized authentication middleware, automated credential lifecycle management, and hardened service-to-service communication patterns using mTLS and SPIFFE/SPIRE)\nDefine the QA philosophy and test strategy for the security layer, including threat modeling, adversarial test coverage, and session and revocation edge cases, and own the security quality gates in the deployment pipeline (e.g., integrating SCA, SAST, and container image scanning)\nImplement and review pull requests across session, token, and authentication systems ensuring that security, testing, and operational readiness\nArchitect and implement encryptions at rest and in transit, key hierarchies, and HSM/KMS integration (e.g., using HashiCorp Vault or cloud-native KMS providers)\nLead team rituals such as design discussions to improve culture, surface new ideas, risks, and strategies across the team\nPartner with security and IT teams to align on networking, observability, and identity patterns (e.g., including VPCs, network policies, IAM, and service mesh configurations) and ensure compliance with relevant industry standards (e.g., OWASP, ISO 27001, NIST, SOC 2)\nLead offensive security and vulnerability discovery efforts (e.g., directing third-party penetration tests, conducting internal red-team exercises, regular security assessments and penetration testing) against core platform components to identify and remediate vulnerabilities\nBeing a force multiplier by championing security programs, patterns, standards, and documentation\nGrow team capability through deliberate coaching; mentor senior engineers on secure API and protocol design\nTravel up to 25% for customer engagement, architecture reviews, or team collaboration (Middle East)\nRequired Qualifications\nActive security clearance Top Secret Clearance required.\n7+ years of experience, with a track record of shaping whole platform or infrastructure security areas rather than individual features\nDeep hands-on experience designing and operating mTLS and TLS-based trust in distributed, multi-service systems, including certificate issuance, x509 validation, CA bundle management, and key rotation\nProven experience building authorization engines and policy models from scratch, including designing the interfaces that other engineers implement against\nStrong background in identity and credential lifecycle: JWT and token issuance and verification, credential grants, session semantics, and revocation across federated or multi-tenant environments\nFluency in Go and protobuf/gRPC service design, with experience securing gRPC contracts and service-to-service communication in a service mesh or comparable architecture\nA working threat modeling practice: you can reason about attacker paths across host and plugin boundaries, enrollment flows, and tenant isolation gaps, and translate that into concrete architecture\nExceptional communication skills across technical and non-technical audiences; you routinely interface with customers, product leaders, and engineering teams to gather requirements, articulate security trade-offs, and drive alignment from initial design to delivery\nHas set technical direction others followed, and can point to a subsystem and explain what they built and what they'd do differently\nTravel up to 25% for customer engagement, architecture reviews, or team collaboration (Middle East)\nDesired Qualifications\nExperience designing secure APIs for multi-tenant platforms, including tenant isolation guarantees and secure-by-default plugin or extension boundaries\nFamiliarity with policy engines such as Cedar or OPA, with experience deciding when to build a custom authorization model versus adopt one\nExperience securing enrollment or bootstrap flows for fleets of untrusted or semi-trusted nodes joining a distributed system\nBackground in national security, intelligence, or defense environments with direct understanding of mission-critical operational requirements.\nPhysical Requirements\nProlonged periods of sitting at a desk and working on a computer\nParticipation in virtual and in-person meetings\nAbility to attend planned meetings and/or work in classified spaces for extended periods within the specified work regions\nTRAVEL: International travel to Middle East and geopolitical hot zones, up to 25% per calendar year is required. Please apply only if you can meet this requirement\nOrbis Benefits\nBeyond the opportunity to work alongside practitioners who have operated at the mission edge, joining Orbis means real ownership over outcomes that matter; the chance to build technology that gives the United States Government and its allies a genuine decision advantage, not just another dashboard. From competitive retirement matching to a PTO policy that encourages real time off, we're committed to creating an environment where our team can do their best work and still have a life outside of it.\nOur comprehensive benefits package is designed to meet the diverse needs of our employees and their families. A full list of benefits is shared with candidates following an initial conversation with our HR team, so you'll have a clear picture of the support and resources available to you as part of the Orbis team.\nOrbis Locations\nOrbis works in whatever arrangement the mission requires. Depending on the role, that might mean five days a week on a customer site, full-time in one of our offices, a hybrid schedule, or fully remote work; our team is spread across 25 states and four countries to match. We make sure every team member has the tools and access needed to do the work, wherever that work happens.\nTravel is common across many Orbis roles, particularly those supporting customer missions in the field.\nOrbis is headquartered in McLean, VA, with additional office locations in Taipei, Taiwan, and Canberra, Australia.\nOrbis is an Equal Employment Opportunity employer. We are committed to providing a work environment free of discrimination and harassment, and we make employment decisions based on merit, \nqualifications, and business need. Orbis does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, genetic information, or any other status protected by applicable law.\nOrbis complies with all applicable equal opportunity and non-discrimination laws in every jurisdiction in which we operate. Reasonable accommodation is available to applicants and employees with disabilities upon request.","description_format":"text","description_chars":8570,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"United Arab Emirates","iso":"AE","kind":"region"},{"name":"Egypt","iso":"EG","kind":"region"},{"name":"Israel","iso":"IL","kind":"region"},{"name":"Saudi Arabia","iso":"SA","kind":"region"},{"name":"Turkey","iso":"TR","kind":"region"},{"name":"Algeria","iso":"DZ","kind":"region"},{"name":"Bahrain","iso":"BH","kind":"region"},{"name":"Comoros","iso":"KM","kind":"region"},{"name":"Djibouti","iso":"DJ","kind":"region"},{"name":"Iraq","iso":"IQ","kind":"region"},{"name":"Jordan","iso":"JO","kind":"region"},{"name":"Kuwait","iso":"KW","kind":"region"},{"name":"Lebanon","iso":"LB","kind":"region"},{"name":"Mauritania","iso":"MR","kind":"region"},{"name":"Morocco","iso":"MA","kind":"region"},{"name":"Oman","iso":"OM","kind":"region"},{"name":"Palestine","iso":"PS","kind":"region"},{"name":"Qatar","iso":"QA","kind":"region"},{"name":"Somalia","iso":"SO","kind":"region"},{"name":"Tunisia","iso":"TN","kind":"region"},{"name":"Western Sahara","iso":"EH","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Government","National Security","Homeland Security"],"lifecycle":[{"event":"open","at":"2026-11-04T14:03:34Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":27,"reasons":["conf:1","win:early"],"computed_at":"2026-11-04T20:51:00Z"},"pay":null,"html_url":"https://alion.io/job/orbisops-staff-security-engineer-top-secret-clearance-required","json_url":"https://alion.io/job/orbisops-staff-security-engineer-top-secret-clearance-required.json","meta":{"generated_at":"2026-11-04T20:51:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32215,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4461375},"rest":"https://alion.io/mcp/rest/get_company?id=4461375"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Forbisops-staff-security-engineer-top-secret-clearance-required"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Forbisops-staff-security-engineer-top-secret-clearance-required"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Forbisops-staff-security-engineer-top-secret-clearance-required"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/orbisops-staff-security-engineer-top-secret-clearance-required\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Forbisops-staff-security-engineer-top-secret-clearance-required"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3747837}},{"tool":"search_jobs","arguments":{"company":"orbisops.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3747837},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}