Cybersecurity Engineer Lead

CACI International Inc; Maryland; On-site; USD 126,000 - 277,000; Full time

Job summary

CACI International Inc is seeking a Cybersecurity Engineer Lead to guide architecture development for DoD intelligence and cyber systems. You will lead Zero Trust implementation, CDS design, and RMF/ATO activities across MLS environments, while mentoring teams and interfacing with government program offices.

The role requires TS/SCI eligibility, a master's degree in a related field, and 10+ years of cybersecurity engineering experience with strong writing and briefing skills.

Qualifications

• Active TS/SCI clearance with SCI eligibility required.
• Master's degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with CS concentration.
• 10+ years of professional cybersecurity engineering experience.
• Experience architecting enterprise cybersecurity solutions for DoD/IC systems.
• Strong understanding of Zero Trust principles and RMF processes.
• Experience with CDS for MLS environments and IC/DoD security requirements.
• Proficient in IAM architectures (MFA, RBAC, ABAC) and secure DevSecOps.
• Excellent writing and briefing skills for senior leadership.

Responsibilities

• Lead cybersecurity architecture development for DoD intelligence and cyber systems.
• Design enterprise cybersecurity architectures across multiple security domains.
• Lead Zero Trust implementation and ICAM solutions for defense systems.
• Architect Cross Domain Solutions for secure data transfer between classifications.
• Develop cybersecurity strategies, policies, and technical standards.
• Lead RMF activities and ATO efforts for complex systems.
• Mentor cybersecurity engineering teams and interface with government offices.
• Oversee security assessments, vulnerability analyses, and validation activities.
• Guide secure DevSecOps pipelines and IaC security controls.
• Develop encryption strategies and PKI implementations.

Skills

Top Secret clearance

Zero Trust

RMF processes

CDS architecture

ICAM

NIST 800-53/800-171

Threat modeling

Leadership

Communication skills

Education

Master's degree in Cybersecurity/Engineering/Mathematics

Tools

ACAS (Nessus)

eMASS

Job description

Job Title: Cybersecurity Engineer Lead

Job Category: Engineering

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

The Opportunity

Lead cybersecurity architecture development and implementation for complex Department of Defense intelligence, electronic warfare, and cyber systems. As a Cybersecurity Engineer Lead, you will:

• Design and develop enterprise-level cybersecurity architectures for intelligence and mission systems operating across multiple security domains
• Lead Zero Trust architecture implementation and Identity, Credential, and Access Management (ICAM) solutions for defense systems
• Architect Cross Domain Solutions (CDS) and secure data transfer capabilities between unclassified, secret, and TS/SCI environments
• Develop cybersecurity strategies, policies, and technical standards to protect mission-critical systems
• Lead Risk Management Framework (RMF) activities and Authorization to Operate (ATO) efforts for complex systems
• Provide technical leadership and mentorship to cybersecurity engineering teams
• Interface with government program offices, Information System Security Managers (ISSMs), and Authorizing Officials

Responsibilities

• Architect and implement Zero Trust security frameworks incorporating micro-segmentation, continuous verification, and least-privilege access controls
• Design secure system architectures that comply with NIST 800-53, NIST 800-171, DoD RMF, and Intelligence Community Directive (ICD) 503 requirements
• Develop security architecture artifacts including system security plans, security architecture diagrams, data flow diagrams, and threat models
• Lead security assessments, vulnerability analyses, penetration testing coordination, and security control validation activities
• Architect and validate Cross Domain Solutions (CDS) for Multi-Level Security (MLS) and secure information sharing across classification boundaries
• Implement Security Technical Implementation Guides (STIGs), secure configuration baselines, and automated compliance scanning solutions
• Design Identity and Access Management (IAM) solutions incorporating Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC)
• Architect secure DevSecOps pipelines integrating continuous security validation, automated vulnerability scanning, and Infrastructure as Code (IaC) security controls
• Develop encryption strategies, Public Key Infrastructure (PKI) implementations, and cryptographic key management solutions
• Lead security architecture reviews, threat modeling sessions, and design review boards
• Develop cybersecurity roadmaps identifying modernization opportunities, emerging threats, and technology insertion strategies
• Provide technical guidance on security architecture decisions to program managers, system engineers, and development teams
• Support incident response planning, security event analysis, and continuous monitoring architectures
• Maintain current knowledge of emerging threats, attack vectors, and defensive technologies applicable to defense intelligence systems

Required

Qualifications:

• Active Top Secret security clearance with SCI eligibility (required)
• Master's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, or Mathematics with concentration in computer science
• 10+ years of professional experience with cybersecurity engineering and architecture
• Demonstrated experience architecting enterprise cybersecurity solutions for DoD or Intelligence Community systems
• Strong understanding of Zero Trust architecture principles and implementation strategies
• Proven experience with Risk Management Framework (RMF) processes including IATT, ATC, and ATO activities
• Experience designing and implementing Cross Domain Solutions (CDS) for multi-level security environments
• Deep knowledge of security frameworks including NIST 800-53, NIST 800-171, CNSSI 1253, and ICD 503
• Experience with Identity and Credential Access Management (ICAM) architectures and implementations
• Strong understanding of defense-in-depth strategies, network security architecture, and secure system design principles
• Experience with security assessment tools such as ACAS (Nessus), eMASS, and security automation platforms
• Demonstrated ability to lead technical teams and influence cybersecurity strategy
• Excellent technical writing and communication skills with ability to brief senior leadership
• IAM, IAT, or IASAE Level I certification per DoD 8570.01-M (or DoD 8140 equivalent)

Desired

• CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager) certification
• CCSP (Certified Cloud Security Professional) or cloud security architecture certifications (AWS Security, Azure Security)
• Experience with DoD Cybersecurity Maturity Model Certification (CMMC) requirements and implementation
• Knowledge of C5ISR, SIGINT, EW, or intelligence systems security requirements
• Experience with Secure Access Service Edge (SASE) and Software-Defined Perimeter (SDP) architectures
• Familiarity with container security, Kubernetes security, and cloud-native security architectures
• Understanding of AI/ML security considerations and adversarial machine learning threats
• Knowledge of electromagnetic spectrum operations security and TEMPEST requirements
• Experience with insider threat detection and User and Entity Behavior Analytics (UEBA)
• Understanding of supply chain risk management and hardware security
• Familiarity with secure communications systems and COMSEC principles
• Experience supporting government program offices in intelligence or special access programs
• Background in security engineering for tactical edge computing and disconnected/intermittent/limited (DIL) environments

What You Can Expect

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The Proposed Salary Range For This Position Is

$126,100 - 277,300 USD

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.