Cybersecurity Engineer (SMA 5)

E-Logic, Inc.; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

E-Logic, Inc. is seeking a highly skilled Cybersecurity Engineer to support the Congressional Budget Office (CBO) under the SENTRY BPA. The role focuses on designing, implementing, and maintaining enterprise security controls enforcing Zero Trust across cloud, network, and endpoint environments.

You will ensure security technologies are configured, hardened, and continuously monitored in line with federal standards and industry best practices. Public Trust Tier 2 clearance is required.

Qualifications

• Must be eligible for a Public Trust Tier 2 clearance.
• 8-10 years of enterprise cybersecurity engineering experience.
• Hands-on experience with Azure AD, MFA, SSO, PAM, RBAC, and Conditional Access.
• Experience with Defender for Endpoint, EDR/XDR, and SIEM (Microsoft Sentinel).
• Knowledge of cloud security (AWS, Azure) and hybrid environments.
• Familiarity with NIST SP 800-53/800-207 and FISMA compliance.
• Change management experience.

Responsibilities

• Security Operations: implement and optimize enterprise security platforms across cloud, on-prem, and hybrid environments.
• Security Architecture: align controls with NIST SP 800-53 and Zero Trust; enforce least privilege and continuous verification.
• Identity & Access Management: configure and manage identity services including MFA, SSO, RBAC, PAM, and conditional access.
• Threat Detection & Incident Response: monitor, analyze, and respond to security events using SIEM/EDR/XDR; assist incident triage and remediation.
• Vulnerability Management: support scanning, assessment, and remediation; coordinate patching and mitigation.
• Cloud Security: secure AWS/Azure platforms and applications with proper configurations and integrations.
• Documentation: maintain up-to-date security configurations and procedures for audit readiness and continuity.

Skills

Azure AD

MFA

SSO

PAM

RBAC

Conditional Access

Zero Trust

NIST/FISMA

Cloud Security

QOS/Threat Detection

Education

Bachelor's degree in Cybersecurity/IT/CS

CISSP/CISM (preferred)

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

Tenable Security Center

Firewalls/IDS/IPS/VPN/WAF

Job description

We are looking for a highly skilled and experienced Cybersecurity Engineer to join our team supporting the Congressional Budget Office (CBO) under the SENTRY Blanket Purchase Agreement (BPA). As a Cybersecurity Engineer, you will design, implement, and maintain enterprise security controls that enforce Zero Trust principles, including identity-centric access, least privilege enforcement, continuous monitoring, and threat detection across cloud, network, and endpoint environments. You will ensure that security technologies, systems, and services are properly configured, hardened, and continuously monitored in accordance with federal security standards and industry best practices.

We are looking for a highly skilled and experienced Cybersecurity Engineer to join our team supporting the Congressional Budget Office (CBO) under the SENTRY Blanket Purchase Agreement (BPA). As a Cybersecurity Engineer, you will design, implement, and maintain enterprise security controls that enforce Zero Trust principles, including identity-centric access, least privilege enforcement, continuous monitoring, and threat detection across cloud, network, and endpoint environments. You will ensure that security technologies, systems, and services are properly configured, hardened, and continuously monitored in accordance with federal security standards and industry best practices.

Key Responsibilities

• Security Operations: Support the implementation, operation, and optimization of enterprise security platforms and services, ensuring protection, availability, and performance across cloud, on-premises, and hybrid environments.
• Security Architecture: Implement and maintain enterprise security controls aligned with NIST SP 800-53 and NIST SP 800-207 (Zero Trust Architecture); enforce Zero Trust principles, including continuous verification, identity-centric security, and least privilege access.
• Identity & Access Management: Configure and manage identity services, including authentication, authorization, role-based access controls, and multi-factor authentication; support privileged access management (PAM) and conditional access policies.
• Threat Detection & Incident Response: Monitor, analyze, and respond to security events and alerts using enterprise security tools (SIEM, EDR/XDR); support incident triage, containment, investigation, and remediation activities.
• Vulnerability Management: Support vulnerability scanning, assessment, and remediation efforts across systems and applications; coordinate patching and mitigation activities to ensure compliance and risk reduction.
• Cloud Security: Assist in securing cloud platforms (AWS, Azure) and application environments, including configuration management, secure integrations, and enforcement of security best practices.
• Documentation: Maintain accurate and up-to-date documentation of security configurations, processes, and procedures to ensure compliance, audit readiness, and operational continuity.

Required Qualifications

• Clearance: Must be eligible to obtain and maintain a Public Trust Tier 2 clearance (background check conducted through U.S. Capitol Police).
• Experience: Minimum of 8-10 years of progressively responsible experience in enterprise cybersecurity engineering.
• Technical Proficiency: Demonstrated hands-on experience with:
• Microsoft Entra ID (Azure Active Directory), MFA, SSO, PAM, RBAC, Conditional Access
• Microsoft Defender for Endpoint, EDR/XDR
• Microsoft Sentinel (SIEM) or equivalent platforms
• Enterprise firewalls, IDS/IPS, VPN technologies, WAF
• Cloud security (AWS, Azure) and hybrid environments
• Network segmentation and micro-segmentation
• Cybersecurity Knowledge: Strong knowledge of NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and FISMA compliance requirements.
• Change Management: Experience supporting formal change management processes, including security impact analysis.

Desired Experience

• Experience with Tenable Security Center and vulnerability management.
• Experience leading cybersecurity initiatives, incident response, and security architecture projects.
• Experience supporting continuous, real-time security monitoring and 24/7 operations.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent professional experience).
• Certifications such as CISSP, CISM, or equivalent are preferred.

Clearance Requirement

Must be eligible for a Public Trust Tier 2

Citizenship

U.S. Citizenship or Permanent Residence Status is required

Job Type

Full-time

Equal Opportunity Employer Statement

E-Logic, Inc. is an equal opportunity employer and is committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.