Cyber Security Engineer

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Define and uphold the organization’s Zero Trust security framework and strategy in alignment with business and security goals.

• Offer insights regarding the Agency's perimeter UTM devices, adhering to NIST 800-53 and industry best practices for Cisco, Juniper, Riverbed, and Fortinet.

• Create Zero Trust roadmaps, maturity models, and implementation strategies across personnel, processes, applications, data, devices, and infrastructure.

• Establish identity-focused security measures, including robust authentication, MFA, SSO, identity governance, and least-privilege access.

• Design network segmentation and micro-segmentation to restrict lateral movement and minimize attack surfaces.

• Implement ongoing verification of users, devices, workloads, applications, and network connections.

• Define policy-driven access controls utilizing identity, device posture, risk, location, application, and behavioral indicators.

• Establish device trust and endpoint security standards, including device compliance, health assessments, encryption, patching, and EDR coverage.

• Develop data-centric security measures, including data classification, encryption, DLP, access governance, and rights management.

• Define security telemetry and continuous monitoring requirements to facilitate real-time risk-based access decisions.

• Integrate Zero Trust controls within cloud, hybrid-cloud, SaaS, on-premises, and multi-cloud environments.

• Evaluate existing infrastructure against Zero Trust maturity frameworks and reference architectures, such as NIST Zero Trust Architecture.

• Identify security gaps, vulnerabilities, architectural risks, and legacy dependencies that hinder Zero Trust implementation.

• Create architectural standards, patterns, reference designs, and security requirements for engineering and project teams.

• Continuously adapt the architecture based on emerging threats, technologies, business needs, and evolving Zero Trust capabilities.

⛳️ Requirements

• 7 years of experience with a bachelor’s degree or 9 years of overall experience.

• Ability to function effectively in both independent and collaborative work settings.

• Willingness to support after-hours maintenance tasks.

• Must be eligible to obtain a Position of Public Trust.

• Experience or familiarity with Zero Trust security architecture and strategy.

• Understanding of NIST 800-53 and industry best practices.

• Familiarity with Cisco, Juniper, Riverbed, and Fortinet devices.

• Capability to develop Zero Trust roadmaps, maturity models, and implementation strategies.

• Knowledge of identity-centric security measures, MFA, SSO, identity governance, and least-privilege access.

• Understanding of network segmentation and micro-segmentation.

• Knowledge of continuous verification and policy-driven access controls.

• Familiarity with endpoint security, device compliance, encryption, patching, and EDR.

• Understanding of data classification, encryption, DLP, access governance, and rights management.

• Knowledge of security telemetry and continuous monitoring.

• Experience with cloud, hybrid-cloud, SaaS, on-premises, and multi-cloud environments.

• Familiarity with NIST Zero Trust Architecture and associated maturity frameworks.

• Ability to identify security gaps, vulnerabilities, architectural risks, and legacy dependencies.

🏝️ Benefits

• Unique benefits and personal touches to foster a positive work-life experience.

• Inc. Magazine ‘Best Workplaces’ award recognition.