S

Sunayu

DevOps, IaC, security, and data engineering

Information Systems Security Engineer

Full-Time
No salary listed
Mid
Bachelor's, Master's
Arlington County, Arlington, VA, USA
In PersonNo travel is required; the work location is the Pentagon.
CybersecuritySecurity Engineering & Architecture
No H1B Sponsorship
US Top Secret Clearance Required

About the job

Requirements
  • Possess an active TS/SCI security clearance.
  • Possess Security+ certification.
  • Have 5 or more years of experience understanding all aspects of systems engineering, including design and architecture.
  • Identify security risks throughout information system network structures, including operating systems, hardware, and data transfer protocols.
  • Present ideas effectively in formal and informal group and individual settings.
  • Plan, organize, prioritize, and follow up on work to ensure completion.
  • Demonstrate initiative and the ability to work independently.
  • Possess a bachelor's degree in computer science or information technology, or an accepted equivalent substitution.
  • A master's degree in computer science or information technology with 3 years of experience may substitute for the bachelor's-degree requirement.
  • A candidate without a degree may substitute 12 years of intensive and progressive experience demonstrating the required proficiency levels.
Responsibilities
  • Provide cybersecurity and security engineering services for the National Military Command Center customer, including system security engineering, cybersecurity risk assessments, and security architecture support.
  • Perform or review technical security assessments of computing environments to identify vulnerabilities, noncompliance with cybersecurity standards and regulations, and mitigation strategies.
  • Build, deploy, and patch HBSS Windows and ACAS Red Hat Enterprise Linux 7.9 and 8 servers.
  • Build, maintain, and patch ePO, Security Center, and Nessus servers.
  • Provide Security Center accounts for Vulnerability Managers to scan devices within ACAS.
  • Analyze ACAS scan results and remediate vulnerability findings.
  • Obtain licenses for HBSS ePOs and Tenable Security Centers.
  • Obtain HBSS and ACAS kickstart ISOs from the Defense Information Systems Agency.
  • Build virtual servers, deploy and patch McAfee modules through ePO, configure McAfee policies for each environment, STIG HBSS Windows operating systems, configure McAfee policies to comply with benchmarks, and STIG ACAS Red Hat Enterprise Linux servers.
  • Run SCAP scans on Windows and Red Hat Enterprise Linux servers.
  • Update Red Hat Enterprise Linux 7.9 and 8 as releases become available.
  • Set up local YUM RPM repositories to patch offline ACAS servers.
  • Deploy rogue sensors on each subnet.
  • Identify rogue subnets and rogue endpoints.
  • Troubleshoot Security Center and Nessus scanner issues.
  • Design, implement, and maintain complex information technology systems, including computing infrastructure, networking rules for cybersecurity, and troubleshooting network errors and other technical issues.
  • Lead the development of technical solutions from refining customer requirements through design, build, test, and deployment.
  • Document and communicate technical solutions and analysis results that support recommended courses of action.

About the company

Sunayu provides DevOps engineering services to mature and evolve a company's technology stack. It uses infrastructure-as-code with a focus on cyber security and big data development to automate deployment, system engineering, analytics, configuration management, and information security. Sunayu differentiates itself through a DevOps culture, cross-functional teamwork, and a blend of security and data expertise that addresses modernization and complex data or security challenges. Its goal is to remove enduring obstacles in a client’s tech footprint by re-envisioning and remodeling infrastructure with automation and reliable engineering practices.

Company Size

11-50

Company Stage

N/A

Total Funding

N/A

Headquarters

Annapolis, Maryland

Founded

2014

Get referred to Sunayu

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Sunayu's careers page was updated Aug. 29, 2026, signaling active hiring.
  • ClearMatch tracks 20 active cleared roles across Maryland and Colorado in September 2026.
  • The company still markets secure, scalable DevSecOps services on its July 2026 website refresh.

What critics are saying

  • HigherGov shows no federal awards and an expired registration on Feb. 24, 2026.
  • Sunayu's 2026 job mix depends on scarce TS/SCI and polygraph talent, raising delivery fragility.
  • GSA 8(a) STARS III ordering base ended July 1, 2026, risking a pipeline reset.

What makes Sunayu unique

  • Founded in 2014; Brandon James and Ryan Yu built Sunayu around DevSecOps and cybersecurity consulting.
  • Sunayu targets cleared government work, with TS/SCI-heavy hiring and Annapolis Junction and Bethesda presence.
  • Its legacy acquisition of Fractal Technology expanded container and mobile security capabilities.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Dental Insurance
  • Vision Insurance
  • Health Savings Account/Flexible Spending Account
  • Life Insurance
  • Disability Insurance
  • Employee Assistance Program
  • Training Programs
  • Paid Time Off
  • Paid Holidays
  • 401(k) Company Match