Lead Cybersecurity Automation Engineer – Zero Trust

GBTI Solutions Inc; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

GBTI Solutions Inc. is seeking a Cybersecurity Expert to serve as the lead technical authority for information systems security engineering, automation, and architecture in Arlington, VA.

You will design, implement, and operationalize automated GRC frameworks and CaC/PaC/IaC solutions aligned with Zero Trust and DoD RMF. The role requires deep experience in translating complex regulatory requirements into automated code and integrating AWS security services for continuous monitoring.

Qualifications

• Active SECRET clearance required.
• Bachelor’s degree in IT/CS/Engineering or related field.
• Certifications listed in the qualifications (AWS/ISC) are preferred.

Responsibilities

• Serve as lead technical resource for automated GRC framework design and implementation.
• Design and implement a four-layer automation architecture (IaC, config mgmt, PaC/CaC, orchestration).
• Translate RMF, NIST SP 800-53, DISA STIGs into automated, operational code.
• Integrate AWS security services for continuous monitoring and automated evidence collection.
• Support real-time Compliance Scoring Dashboards and RESTful APIs.
• Provide guidance to ISSMs, ISSOs, and stakeholders on security posture.

Skills

Active SECRET clearance

Security automation

Cloud engineering

Infrastructure as Code

GRC automation

RMF/NIST knowledge

Education

Bachelor’s degree in IT/CS/Engineering

Tools

AWS Certified DevOps Engineer – Professional

AWS Certified Solutions Architect – Professional

AWS Certified Security – Specialty

ISC² CISSP (ISSEP/ISSAP)

Job description

GBTI Solutions Inc. is seeking a Cybersecurity Expert to serve as the lead technical authority for information systems security engineering, automation, and architecture in Arlington, VA.

You will design, implement, and operationalize automated GRC frameworks and CaC/PaC/IaC solutions aligned with Zero Trust and DoD RMF. The role requires deep experience in translating complex regulatory requirements into automated code and integrating AWS security services for continuous monitoring.