Zero-Trust Cybersecurity Engineer - Hybrid DC

Innovim; Washington, Northern (District of Columbia, KY); Hybrid; USD 90,000 - 107,000; Full time

Job summary

Innovim in Washington, DC is seeking a Cybersecurity Engineer to design, implement, and maintain enterprise security controls enforcing Zero Trust across cloud, network, and endpoints for a U.S. legislative branch agency.

The role requires deep knowledge of NIST SP 800-53/800-207, IAM/MFA, and vulnerability management, with hybrid on-site/remote work as needed. Citizenship or permanent residence is required to obtain a Public Trust.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 8+ years hands-on cybersecurity engineering experience.
• Experience with SIEM, EDR/XDR, IAM/MFA, and vulnerability management.
• Knowledge of NIST SP 800-53, SP 800-207, and RMF.
• U.S. citizenship or permanent residence with ability to obtain Public Trust.

Responsibilities

• Implement and maintain enterprise security controls aligned with NIST SP 800-53 families.
• Enforce Zero Trust Architecture per NIST SP 800-207 with least-privilege access.
• Configure IAM, RBAC, PAM, and MFA across cloud, network, and endpoints.
• Monitor security events with SIEM/EDR; assist with incident response.
• Maintain centralized log collection, retention, and analysis.
• Perform vulnerability scanning and coordinate patching.
• Support cloud/security configurations for AWS/Azure; secure workloads.
• Harden systems and apply segmentation to limit lateral movement.
• Conduct RMF-based risk analysis and RCA for incidents.
• Develop cybersecurity SOPs, baselines, and audit-ready docs; 24/7 ops.

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

SIEM (Microsoft Sentinel | Splunk)

EDR/XDR (Microsoft Defender)

IAM/MFA

Vulnerability management (Tenable)

Job description

Innovim in Washington, DC is seeking a Cybersecurity Engineer to design, implement, and maintain enterprise security controls enforcing Zero Trust across cloud, network, and endpoints for a U.S. legislative branch agency.

The role requires deep knowledge of NIST SP 800-53/800-207, IAM/MFA, and vulnerability management, with hybrid on-site/remote work as needed. Citizenship or permanent residence is required to obtain a Public Trust.