Remote Zero-Trust Cybersecurity Engineer

CMT Services, Inc.; Washington (District of Columbia); Hybrid; USD 110,000 - 150,000; Full time

Job summary

CMT Services, Inc. seeks a Cybersecurity Engineer for the US Congressional Budget Office project in Washington, DC. This role designs and maintains enterprise security controls, enforcing Zero Trust across cloud, on-premises, and hybrid environments.

Responsibilities include implementing NIST-aligned controls, managing IAM and MFA, SIEM integration, and continuous monitoring to strengthen posture and incident response capabilities.

Qualifications

• Hands-on experience engineering enterprise security controls across cloud, network, and endpoint per NIST SP 800-53 and NIST SP 800-207 Zero Trust.
• Experience with IAM, RBAC, PAM, and MFA, and integration with enterprise identity providers.
• Experience with SIEM and EDR/XDR — centralized logging, continuous monitoring, threat detection, triage, containment, and forensic collection.
• Experience with vulnerability management, NIST RMF risk analysis, secure-baseline hardening, and patch/mitigation coordination.
• Experience securing AWS and Azure cloud/hybrid environments and supporting audit readiness, SOPs, RCA, and 24/7 operations.

Responsibilities

• Support implementation, operation, and optimization of enterprise security platforms across cloud, on-premises, and hybrid environments.
• Implement/maintain controls aligned with NIST SP 800-53 and NIST SP 800-207 Zero Trust.
• Design/maintain least-privilege access — RBAC, PAM, and MFA across enterprise systems.
• Configure/manage IAM solutions; integrate with enterprise identity providers for secure authentication/authorization.
• Configure/maintain centralized logging, monitoring, and audit; integrate with enterprise SIEM; comply with retention policies.
• Conduct continuous monitoring, vulnerability assessment, and risk analysis aligned with NIST RMF; harden systems/apps/cloud to secure baselines.
• Secure cloud/hybrid environments (AWS, Azure) — security services, identity controls, network protections, workload security.
• Identify/remediate vulnerabilities; coordinate patching/mitigation; support IR (alert monitoring, analysis, containment, forensic collection).
• Maintain segmentation/access strategies to limit lateral movement; follow formal change management with security impact analysis.
• Develop/maintain cybersecurity SOPs, system configurations, baselines, and asset inventories; perform RCA; support 24/7 monitoring (SIEM, EDR/XDR, cloud-native tools).
• Collaborate with network, cloud, and application teams; serve as technical resource for advanced service desk and security issues.

Skills

NIST SP 800-53

NIST SP 800-207 Zero Trust

IAM / RBAC / PAM / MFA

SIEM / EDR/XDR

Vulnerability management

Education

Bachelor’s degree in IT / Cybersecurity

Tools

AWS

Azure

Job description

CMT Services, Inc. seeks a Cybersecurity Engineer for the US Congressional Budget Office project in Washington, DC. This role designs and maintains enterprise security controls, enforcing Zero Trust across cloud, on-premises, and hybrid environments.

Responsibilities include implementing NIST-aligned controls, managing IAM and MFA, SIEM integration, and continuous monitoring to strengthen posture and incident response capabilities.