State Affairs

Information Security Engineer

Washington, DC

No sponsorship$120k-$180kDetected 20 days ago

PythonBashPowerShellGitAWSDatadogRESTCybersecurityNetwork SecuritySIEMSOC OperationsComplianceTCP/IPDNSFirewallVPNCiscoZero TrustCommunication

About the role

This role will be responsible for identity and access management, endpoint security, security alert triage, device compliance, security automation, and corporate IT security operations.
This is an onsite work opportunity and our teams operate from the Washington, DC office (located at L and 15th St.
The annual salary range for this role as it is posted is $120,000 - $180,000 for candidates working from a State Affairs office.

Own identity and access management across SSO, directory systems, MFA, SCIM provisioning, and corporate SaaS applications.
Manage secure onboarding, offboarding, access changes, and recurring access reviews across employee systems.
Provision, manage, and de-provision laptops and employee devices using automated MDM tools.
Support phishing response, suspicious login investigations, endpoint security events, and other corporate security incidents.
Maintain and improve corporate network security, including secure Wi-Fi, VLAN basics, VPN/Zero Trust access, firewall hygiene, and office network troubleshooting.
Support routine security patch management, vulnerability remediation tracking, and corporate compliance validation.
Support SOC 2 and other compliance efforts by producing evidence for access controls, device management, security monitoring, patching, and user lifecycle management.
Maintain security runbooks, IT/security documentation, administrative scripts, and Git-backed operational procedures.
Partner with engineering and operations teams on secure access to internal systems, VPN/private network access, least-privilege permissions, and security process improvements.
Provide escalation-level IT support for employee devices, account access, local network issues, and corporate systems.

Candidates must be authorized to work in the United States without the need for current or future company sponsorship.
Bachelor's degree in computer science, engineering, or related field

Prior startup experience in a security, IT, infrastructure, or operations role.
Experience with tools such as Google Workspace, JumpCloud, Okta, Cloudflare, Tailscale, Jamf, Kandji, Intune, CrowdStrike, SentinelOne, Datadog, AWS, or similar platforms.
Familiarity with SOC 2, ISO 27001, CIS Controls, or similar security/compliance frameworks.
Experience supporting security questionnaires, audit evidence collection, access reviews, or vendor security reviews.
Experience automating identity, endpoint, SaaS administration, or compliance workflows.
Certifications such as CompTIA Security+, Network+, Cisco CCNA, AWS Certified Cloud Practitioner, or equivalent practical experience.

State Affairs is the nation's leading news and policy intelligence platform focused on state governments.

State Affairs offers a competitive salary and a comprehensive benefits package to employees.

Administer and improve endpoint security controls across macOS and Windows devices, including MDM, disk encryption, patch compliance, EDR coverage, and device posture reporting.

equal opportunity employer and makes employment decisions on the basis of merit and business needs.
If you need assistance or an accommodation due to a disability, you may contact us at jobs@stateaffairs.com

Candidates must be authorized to work in the United States without the need for current or future company sponsorship.

This listing is sourced directly from State Affairs's careers page and normalized into a canonical job model.