{"id":3696692,"url":"https://alion.io/job/rivasolutionsinc-senior-information-systems-engineer-endpoint-security-ca","title":"Senior Information Systems Engineer (Endpoint Security & C&A)","company":{"id":3076145,"name":"RIVA Solutions","domain":"rivasolutionsinc.com","url":"https://alion.io/company/rivasolutionsinc","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Support","role_family":"Support","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":95000,"max":110000,"currency":"USD","period":"year","gross":null,"usd_annual":110000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"FedRAMP","optional":false},{"name":"KEV","optional":false},{"name":"Service Desk","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-19T22:49:00Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-11-09T04:12:34Z","board_verified":true,"closed_at":null,"days_open":20,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":20},"description":"RESULTS. INNOVATION. VALUES. ACCOUNTABILITY. \nThat’s RIVA. \nWe’re a mission-driven IT services company and systems integrator supporting digital transformation and modernization for federal government agencies. Since 2009, we’ve partnered with our customers to solve complex challenges through smart, practical innovation to deliver real outcomes where they matter most. Our teams are made up of industry-leading experts who are passionate about doing great work and making a difference. We don’t just develop solutions, we support efforts that strengthen communities and serve the public good. \nRIVA’s culture is built on four core values: Results, Innovation, Values, and Accountability. They guide how we work, how we collaborate, and how we measure success. Our employee-first approach is rooted in trust, ownership, and meaningful work. By investing in our people and fostering a flexible, supportive environment, employees have the opportunity to grow their skills, contribute ideas, and make an impact from day one. all while supporting missions that matter. \nPOSITION OVERVIEW\nSeeking a Senior Information Systems Engineer (Endpoint Security & C&A) to provide advanced security engineering, endpoint device management, certification/accreditation (C&A), and federal vulnerability reporting support. The position will be in support of the Information Technology Service Desk and Engineering Support program for a Contract at U. S. Department of Health and Human Services.\nThe engineer will play a critical role in designing, testing, and implementing endpoint and network security solutions, ensuring compliance with NIST, FISMA, FedRAMP, CISA Binding Operational Directives (BODs), and HHS OIG standards. This position requires hands-on expertise in endpoint engineering, vulnerability reporting, security architecture, and certification/accreditation processes, with an emphasis on presenting security findings and remediation strategies to management.\nSecurity Engineering\nSupport Government-furnished security services assets plus systems, including refreshes and upgrades. Analyze and deliver monthly status reports.\nEngineer security solutions for hardware, software, and services to protect networks from unauthorized devices, users, and malicious code.\nProvide security engineering support in compliance with federal and HHS security mandates, including NIST SP 800-53, NIST SP 800-207 (Zero Trust), DISA STIGs, FedRAMP, and FIPS standards.\nConduct security reviews of network configurations, firewall rules, and endpoint solutions, providing recommendations for continuous improvements.\nSafeguard Personally Identifiable Information (PII) in compliance with NIST SP 800-122.\nProvide real-time or near real-time log forwarding to SIEM systems and support audit requirements.\nVulnerability & Compliance Reporting\nMonitor and assess CVE and Known Exploited Vulnerability (KEV) catalogs published by CISA.\nDevelop, document, and deliver reports on CVE/KEV findings, remediation timelines, and risk ratings.\nTrack and report compliance with CISA Binding Operational Directives (BODs), including mandated remediation deadlines.\nPrepare executive summaries and technical reports on vulnerability management activities for leadership.\nPresent vulnerability, risk, and remediation findings to management and stakeholders in a clear, actionable manner.\nEndpoint Engineering & Certification/Accreditation\nProvide engineering support for endpoint devices (desktops, laptops, thin clients, tablets, mobile phones, and wearables).\nDevelop technical plans for endpoint engineering, covering design, scheduling, resources, and monitoring.\nConduct endpoint integration and security testing to ensure compliance with defined requirements and HHS-OIG policies.\nDevelop and maintain endpoint-related SOPs, requirements documentation, and acceptance criteria.\nPerform regular technical reviews with Government staff and present recommendations to improve efficiency and cybersecurity concerns.\nAssist with System Security Plans (SSPs), Contingency Plans, POA&Ms, and Penetration Test Reports.\nMitigate high-risk vulnerabilities within 30 days and moderate-risk vulnerabilities within 90 days.\nCollaborate with HHS OIG and internal technical teams regarding incidents, escalations and reportig\nMINIMUM QUALIFICATIONS\nBachelor’s degree in Information Systems, Computer Science, Engineering, or related field (or equivalent practical experience).\n8+ years of experience in IT security engineering, endpoint security, vulnerability management, and C&A processes.\nStrong knowledge of federal IT security frameworks, including:NIST SP 800 series (800-53, 800-122, 800-157, 800-207, etc.)\nFIPS 140-2 and FIPS 201-2\nFedRAMP standards\nFISMA requirements\nCISA Binding Operational Directives (BODs) and KEV reporting requirements\n\nHands-on experience with vulnerability assessment, CVE/KEV reporting, and remediation tracking.\nExperience preparing and presenting security findings and compliance reports to executive management.\nExpertise in endpoint engineering and SIEM integration.\nStrong documentation and technical writing skills, including C&A documentation.\nPREFERRED QUALIFICATIONS\nAdvanced degree in Cybersecurity, Engineering, or related field.\nSecurity certifications such as CISSP, CISM, CISA, CEH, CompTIA Security+, or equivalent.\nExperience supporting HHS, DHS, DoD, or other federal agencies in endpoint security and compliance reporting.\nExpertise in Zero Trust Architecture, endpoint detection/response, and advanced vulnerability management solutions.\nStrong presentation and stakeholder presentation skills.\nAdditional Information\nMust be able to obtain and maintain a Public Trust clearance.\nThis role involves direct collaboration with Government staff and requires strict adherence to security and confidentiality protocols.\n\nThe salary or salary range for this role reflects an estimated range informed by multiple compensation factors. Final offers may vary based on considerations such as relevant experience, education and training, critical skillsets, and overall business needs.\nPay range\n$95,000—$110,000 USD\nEQUAL EMPLOYMENT OPPORTUNITY & ACCOMMODATION\nWe believe great teams are built from different backgrounds, perspectives, and lived experiences, and we mean that beyond the buzzwords. \nRIVA is an equal opportunity employer. We welcome applicants of every race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, and any other characteristic protected by law.\nIf you need an accommodation at any point in our process, send an email to , we'll be happy to help.\nVETERAN SUPPORT & ACCESSIBILITY\nAs a federal contractor, RIVA follows the requirements of the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA) and Section 503 of the Rehabilitation Act, supporting the employment and advancement of protected veterans and individuals with disabilities. If you're a veteran, we encourage you to self-identify during the application process, it helps us track our hiring commitments and, in some cases, may support priority referral for open roles.\nRIVA also invites applicants to voluntarily self-identify as having a disability during the application process, not because it affects your chances of being hired, but because it helps us measure how well we're living up to our commitments and identify where we can do better. Your response is confidential and entirely optional.","description_format":"text","description_chars":7485,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-11-03T18:16:07Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":107500,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.9,"p_room":0.9,"age_days":20,"expected_fill_days":36,"reasons":["conf:1","velocity","win:mid"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":110000,"is_top_pay":true},"html_url":"https://alion.io/job/rivasolutionsinc-senior-information-systems-engineer-endpoint-security-ca","json_url":"https://alion.io/job/rivasolutionsinc-senior-information-systems-engineer-endpoint-security-ca.json","meta":{"generated_at":"2026-11-09T07:44:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5338,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3076145},"rest":"https://alion.io/mcp/rest/get_company?id=3076145"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frivasolutionsinc-senior-information-systems-engineer-endpoint-security-ca"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frivasolutionsinc-senior-information-systems-engineer-endpoint-security-ca"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frivasolutionsinc-senior-information-systems-engineer-endpoint-security-ca"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rivasolutionsinc-senior-information-systems-engineer-endpoint-security-ca\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frivasolutionsinc-senior-information-systems-engineer-endpoint-security-ca"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3696692}},{"tool":"search_jobs","arguments":{"company":"rivasolutionsinc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3696692},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}