Cybersecurity Engineer (RMF/Zero Trust)

GovCIO; Arlington (VA); Hybrid; USD 220,000 - 240,000; Full time

Job summary

GovCIO is seeking a Cybersecurity Engineer (RMF / Zero Trust) with an active Secret clearance to design, implement, and maintain cybersecurity solutions that protect enterprise systems while ensuring compliance with federal security frameworks. The role is based in Arlington, VA, with a hybrid/remote work option.

Responsibilities include implementing controls, supporting authorization activities, designing Zero Trust architectures, enabling vulnerability management, and contributing to security

Qualifications

• Bachelor's degree or commensurate experience in a relevant field.
• 5–10 years of cybersecurity experience as a baseline.
• Proven RMF/NIST 800-53 expertise and Zero Trust design experience.

Responsibilities

• Implement RMF/NIST-aligned controls and assess authorization activities.
• Design and maintain Zero Trust architectures and security solutions.
• Lead vulnerability management and remediation efforts.
• Support incident detection and response and develop security artifacts.

Skills

RMF/NIST

Zero Trust

IAM/PAM

SIEM

Vulnerability mgmt

Cloud security

Endpoint security

Security docs

Education

Bachelor’s degree/experience

Tools

AWS

Azure

Security automation

Job description

GovCIO is hiring a Cybersecurity Engineer (RMF / Zero Trust) with an active Secret clearance to design, implement, and maintain cybersecurity solutions that protect enterprise systems while ensuring compliance with federal security frameworks, risk management requirements, and Zero Trust principles. This position is based in Arlington, VA, and is a hybrid/remote position.

Responsibilities

• Implement cybersecurity controls aligned with RMF and NIST standards.
• Support system authorization, assessment, and continuous monitoring activities.
• Design Zero Trust architectures and security solutions.
• Perform vulnerability management and remediation.
• Implement identity, access, endpoint, and network security controls.
• Conduct security assessments and risk analysis.
• Develop security documentation and compliance artifacts.
• Support incident detection and response activities.

Qualifications

Bachelor's with 12+ years of infrastructure/cloud engineering experience (or commensurate experience)

Required Skills And Experience

• Minimum of 5–10 years of experience in cybersecurity
• Demonstrated expertise in NIST Risk Management Framework (RMF)
• In-depth knowledge of NIST 800-53 security controls
• Experience designing and implementing Zero Trust Architectures
• Proficient in Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions
• Hands‑on experience with Security Information and Event Management (SIEM) tools
• Skilled in conducting vulnerability scanning and remediation
• Strong background in cloud security practices and technologies
• Experience implementing endpoint protection solutions and security automation

Preferred Skills And Experience

• Security+ (DoD 8570/8140)
• CISSP
• CISM
• Certified Ethical Hacker (CEH)
• AWS/Azure Security certifications

Clearance Required

Must have an active Secret clearance and be able to attain DEA suitability.

Posted Salary Range: USD $220,000.00 - USD $240,000.00 /Yr.