Security & Compliance Engineer

About Maximus

Maximus is a trusted federal partner supporting mission-critical programs across national security, defense, and public service delivery. Our work focuses on sustaining, operating, and improving essential government systems and services, with proven operational excellence, and a commitment to mission success for our customers.

Joining Maximus means becoming part of a collaborative, mission-driven organization where teamwork, accountability, and professional growth are core to how we operate. We invest in our workforce through training, education, and career development, empowering professionals to deliver high-impact solutions while contributing to outcomes that matter at a national scale.

This position is contingent upon contract award and position availability. Selected candidates will receive a contingent offer of employment, which will become final only upon successful contract award to Maximus, availability of the position, and receipt of authorization to proceed.

Ability to obtain and maintain a Public Trust is required. An active Public Trust and/or DHS suitability is preferred.

This position is remote. Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS039, T3, Band 6

Job-Specific Essential Duties and Responsibilities:

• Experience supporting documentation, reporting, and compliance activities
• Understanding of network monitoring tools and alert triage processes
• Ability to support activities across multiple enterprise network environments
• Strong attention to detail and ability to work in structured, compliance-driven environments
• Familiarity with network security concepts, including firewalls, access control, and traffic monitoring
• Experience or exposure to vulnerability management, compliance tracking, or IT security support functions
• Basic understanding of network infrastructure, protocols, and communications systems
• Ability to execute directed security actions using standard operating procedures and runbooks

Job-Specific Minimum Requirements:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
• 6+ years of experience in cybersecurity, network security, or IT infrastructure support in enterprise environments

Preferred Skills and Qualifications:

• Experience with network security tools such as firewalls, IDS/IPS, and monitoring platforms
• Familiarity with vulnerability scanning and remediation in network environments
• Knowledge of compliance frameworks such as NIST and FISMA
• Experience supporting network configuration changes and access control enforcement
• Exposure to hybrid environments including on-premises and cloud networking
• Strong troubleshooting, documentation, and coordination skills
• Ability to work effectively across network and security teams
• Provide embedded cybersecurity support within network and communications environments, ensuring alignment with enterprise security and compliance requirements.
• Execute directed cyber actions including network access restrictions, firewall and policy updates, allow/block list management, and configuration changes.
• Support vulnerability management and ISVM compliance activities for network and communications systems, including remediation tracking and reporting of findings.
• Perform POA&M analysis and assist with remediation coordination for network-related security issues.
• Monitor and operate network security tools, supporting alert triage, threat detection, and initial response actions across network and communications infrastructure.
• Assist in spill response and containment activities impacting network systems, including execution of predefined remediation actions and evidence collection.
• Contribute to preparation of monthly scorecard data and reporting metrics related to network security posture and compliance.
• Maintain documentation, incident logs, and runbooks to support auditability, traceability, and knowledge transfer.
• Support testing and validation activities following network changes, patching, upgrades, and security configuration updates.
• Collaborate with network, infrastructure, and security teams to ensure consistent enforcement of security controls across all communications environments.

Key skills/competency:

• Security Engineering
• Compliance Management
• Network Security
• Vulnerability Management
• Risk Assessment
• Incident Response
• IT Security Support
• Documentation
• Troubleshooting
• Cybersecurity