Cybersecurity Systems Engineer – CAASM (Armis)

Cybersecurity Systems Engineer – CAASM (Armis)

Location: Remote
Employment Type: Full-Time

About SERVISS

At SERVISS, we deliver cutting-edge cybersecurity and IT solutions to government and commercial clients, with a mission to secure systems, data, and critical infrastructure through innovation and expertise. We don’t just deploy tools — we engineer mission platforms that become foundational systems of record for cyber operations, compliance automation, and national cyber readiness. From CISA CDM to DoD mission enclaves, our work shapes how government sees, governs, and defends its digital terrain.
As we expand our capabilities, we’re seeking a hands-on CAASM engineer with Armis expertise to help build, integrate, and operate enterprise cyber asset visibility platforms.

Position Summary

SERVISS is seeking a CAASM Engineer to support the design, deployment, integration, and operation of Cyber Asset Attack Surface Management (CAASM) platforms — with a primary focus on Armis (Axonius or equivalent a plus) — across hybrid cloud and enterprise environments. The ideal candidate works as part of a cross-functional security team to onboard asset sources, streamline data pipelines, and enhance visibility into enterprise cyber assets, exposures, and risk. This is a technically hands-on role reporting to the CAASM Engineering Lead.
This position is scoped at a mid-level baseline (3+ years), but we actively encourage senior and highly experienced engineers to apply — role scope, level, and compensation can flex to match demonstrated expertise.

The Work

This is a hands-on engineering role. The selected candidate will:

• Deploy, configure, and tune Armis (or equivalent CAASM platforms) across hybrid cloud and enterprise environments
• Onboard and maintain data integrations from CMDBs, EDR/XDR, vulnerability feeds, cloud inventories, identity, network, and SaaS sources
• Develop and maintain automation scripts and workflow connectors (Python, PowerShell, Bash) to enhance data ingestion and normalization
• Build normalization, correlation, and enrichment logic that turns raw telemetry into authoritative asset intelligence
• Monitor data quality, troubleshoot integration issues, and resolve engineering escalations
• Support platform optimization, performance tuning, and operational stability
• Configure dashboards, reports, and risk views that render asset and exposure data for technical and stakeholder audiences
• Produce and maintain documentation for deployment architectures, configuration baselines, and operational procedures

Key Responsibilities

• Assist with installation, configuration, and integration of CAASM platforms (Armis primary; Axonius or equivalent a plus)
• Onboard and maintain data integrations from CMDBs, vulnerability feeds, cloud inventories, and endpoint tools
• Develop and maintain automation scripts and workflow connectors to enhance data ingestion and normalization
• Support CAASM platform optimization, performance tuning, and operational stability
• Monitor data quality, troubleshoot integration issues, and resolve engineering escalations
• Collaborate with cybersecurity analysts and stakeholders to translate security requirements into technical solutions
• Support cyber governance reporting, continuous monitoring, and compliance automation efforts

Required Qualifications

• Experience: 3+ years in cybersecurity engineering, systems integration, or IT infrastructure roles (candidates with more experience are encouraged to apply)
• Hands-on experience with Armis, or a comparable CAASM / asset intelligence platform (e.g., Axonius)
• Strong understanding of IT systems including Windows, Linux, and cloud platforms (AWS/Azure)
• Familiarity with APIs, data ingestion pipelines, RESTful integration, and scripting (Python, PowerShell, Bash)
• Knowledge of networking fundamentals and security principles (asset discovery, vulnerability context, normalization)
• Ability to troubleshoot complex technical issues and communicate effectively with technical and non-technical audiences
• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a similar field — or equivalent experience or relevant certifications

Preferred Qualifications

• Direct hands-on Armis deployment, integration, or administration experience
• Experience with asset management, CAASM applications, or enterprise security tools
• Familiarity with cloud-native services (AWS, Azure) and service APIs
• Experience with SIEMs common in the federal market (e.g., Elastic, Splunk) and common sensor tools
• Understanding of Federal cyber governance — NIST 800-53/171, RMF, CDM, and continuous monitoring
• Certifications such as Security+, CySA+, GSEC, or vendor-specific CAASM certifications
• Exposure to data analytics or BI dashboards related to security telemetry
• Prior DoD or Federal civilian cybersecurity experience and an active security clearance

Freedom to Thrive.

Why Join SERVISS? Our goal as an employer is simple yet profound: to create an environment where you can be your best self, pursue your passions, and enjoy the freedom to thrive both personally and professionally. Your success is our success, and we’re committed to supporting you every step of the way.

• Be part of an exciting company with ground floor opportunities in the Equity Participation Program
• Highly competitive compensation and best in class benefits
• 100% of medical, vision, dental, and life insurance premiums paid for by SERVISS
• Opportunities for annual performance bonuses and growth incentives
• 401(k) retirement plan with 6% dollar for dollar match

Additional Considerations for HUBZone Applicants

Preference may be given to applicants residing in a federal HUBZone in support of SERVISS LLC’s HUBZone workforce objectives; all qualified candidates are encouraged to apply.

How to Determine HUBZone Residency

Candidates can verify HUBZone eligibility by entering their home address into the SBA HUBZone Map at https://maps.certify.sba.gov/hubzone/map. If your residence falls within a designated HUBZone area on the map, you are considered a HUBZone resident for hiring preference purposes.