Cybersecurity Engineer

LMI Consulting, LLC; Tysons (VA); On-site; USD 102,000 - 170,000; Full time

Job summary

LMI Consulting, LLC is seeking a Cybersecurity Engineer to design secure system architectures that enable federal authorization and compliance. You will translate regulatory frameworks into practical architecture patterns for platforms and applications, bridging security governance with engineering teams and government stakeholders.

The role focuses on FedRAMP, RMF, CMMC, and modern cloud architectures, with responsibilities spanning GRC activities, artifact development, and secure reference

Qualifications

• Top Secret clearance required.
• Active CISSP, CISM, GSLC, C|CISO, or comparable senior certification.
• 10+ years of federal cybersecurity experience in system security engineering, security architecture, or GRC programs aligned with NIST SP 800-53 and RMF.
• Experience supporting FedRAMP, DoD RMF, or CMMC authorization.
• Strong understanding of modern cloud architectures (AWS, Azure) and hybrid infrastructure.
• Ability to translate compliance frameworks into technical guidance for engineering teams.
• Excellent communication skills bridging security, engineering, and government stakeholders.

Responsibilities

• Architect systems to support authorization under FedRAMP, DoD RMF, CMMC, and related frameworks.
• Translate NIST SP 800-53/171 requirements into concrete architecture patterns and engineering strategies.
• Define secure reference architectures across identity, network, platform security, data protection, logging, monitoring, and boundaries.
• Collaborate with DevSecOps to embed controls into CI/CD pipelines and workflows.
• Lead or support GRC activities including control implementation planning, risk assessments, and authorization readiness.
• Develop authorization artifacts like SSPs, control narratives, and POA&Ms.

Skills

Security architecture

DevSecOps

GRC

Communication

Risk assessment

Education

Master's degree or Bachelor's with equivalent experience

Tools

AWS

Azure

Job description

Cybersecurity Engineer

Job Locations: US-VA-Tysons

Overview

We are looking for a Cybersecurity Engineer to design and guide secure system architectures that can achieve and sustain federal cybersecurity authorization. This role focuses on translating complex regulatory frameworks into practical architecture patterns that enable platforms and applications to meet the rigorous expectations of federal security programs.

You will operate at the intersection of security architecture, DevSecOps, and Governance, Risk, and Compliance (GRC)-ensuring systems are architected for authorization success while also guiding the documentation, risk management, and programmatic processes required to achieve and maintain compliance.

This role is ideal for an experienced security architect or senior federal cybersecurity professional who understands both federal authorization frameworks and modern cloud/software architectures, and who can bridge engineering teams, security governance functions, and government stakeholders.

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors-helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

Responsibilities

• Architect systems to support authorization under FedRAMP, DoD RMF, CMMC, and related federal cybersecurity frameworks
• Translate requirements from NIST SP 800-53, NIST SP 800-171/172, and DoD security guidance into concrete architecture patterns and engineering implementation strategies
• Define secure reference architectures across identity, network segmentation, platform security, data protection, logging, monitoring, and system boundary design
• Work directly with engineering and DevSecOps teams to embed security controls into platform architecture, CI/CD pipelines, and operational workflows
• Conduct security architecture and design reviews for applications, platforms, and infrastructure supporting federal missions
• Guide teams in structuring systems for authorization efficiency, including control inheritance strategies, system boundary definitions, and shared service architectures
• Lead or support GRC program activities including control implementation planning, risk assessments, and authorization readiness
• Support development of authorization artifacts including System Security Plans (SSPs), control narratives, architecture documentation, and POA&Ms
• Provide expertise on DoD Cloud Computing environments (IL4/5/6), National Security Systems (NSS), and environments handling CUI and National Security Information
• Conduct DISA STIG analysis and secure configuration reviews for operating systems, platforms, and infrastructure
• Collaborate with DevSecOps teams to implement automated compliance validation, continuous monitoring, and security telemetry
• Provide architecture guidance and security readiness briefings to engineering teams, leadership, and government stakeholders
• Monitor evolving federal cybersecurity policy and translate emerging requirements into architecture and GRC program guidance

Qualifications

• Top Secret clearance required.
• Active CISSP, CISM, GSLC, C|CISO, or comparable senior cybersecurity certification
• 10+ years of experience in federal cybersecurity supporting system security engineering, security architecture, or GRC programs aligned with NIST SP 800-53 and the NIST Risk Management Framework
• Experience supporting systems pursuing FedRAMP, DoD RMF, or CMMC authorization
• Experience implementing and managing security control programs and compliance activities including SSP development, POA&Ms management, and authorization readiness
• Strong understanding of modern cloud architectures (AWS, Azure, or similar), hybrid infrastructure, and containerized platforms
• Experience translating compliance frameworks into technical implementation guidance for engineering teams
• Experience performing risk assessments related to architecture changes, vulnerabilities, new systems, and data governance
• Strong communication skills and the ability to bridge security, engineering, and government stakeholders

Preferred Qualifications

• Experience supporting DoD Cloud Computing SRG environments (IL4/5/6)
• Experience working with National Security Systems (NSS) or classified-adjacent architectures
• Familiarity with DevSecOps platforms and compliance automation approaches
• Experience using GRC platforms to manage controls, artifacts, and continuous monitoring
• Experience participating in Architecture Review Boards (ARB), Change Advisory Boards (CAB), or security design reviews
• Experience supporting environments that process or store Controlled Unclassified Information (CUI)
• Experience working in federal consulting, defense, intelligence, or mission-focused environments
• Master's degree or bachelor's degree with equivalent experience

What Success Looks Like

• Systems are architected from the start to meet federal security requirements, avoiding costly redesigns during authorization
• Engineering teams understand how to implement security controls as part of system architecture

The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.

The target salary range for this posiiton is up to $170,000

Applicants must meet eligibility requirements for a U.S. Government security clearance. Only US Citizens are eligible for a security clearance. For this position, LMI will only consider applicants with security clearances or applicants who are eligible for security clearances, due to the nature of the work.

Equal Opportunity Employer

LMI is an Equal Opportunity Employer. LMI is committed to the fair treatment of all and to our policy of providing applicants and employees with equal employment opportunities. LMI recruits, hires, trains, and promotes people without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, disability, age, protected veteran status, citizenship status, genetic information, or any other characteristic protected by applicable federal, state, or local law. If you are a person with a disability needing assistance with the application process, please contact [e-mail]

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.