Zero Trust Cybersecurity Engineer - Onsite, TS/SCI

GovCIO; Hampton (VA); On-site; USD 180,000 - 200,000; Full time

Job summary

The engineer will work on continuous verification, ABAC enforcement, and ICAM modernization, while integrating SIEM/EDR/SOAR tools and maintaining system security documentation. Strong DoD guidelines familiarity is essential.

Qualifications

• Active TS/SCI clearance required.
• Experience in the AF Intelligence Community or IC missions.
• IAT III level certification or equivalent security credentials.
• Strong understanding of Zero Trust, frameworks, and DoD Zero Trust Strategy.
• Hands-on security operations, vulnerability management, or network security.
• Familiarity with NIST RMF, NIST SP 800-53, DoD Cloud SRG, and IC guidelines.
• Experience with security tools such as Splunk, ArcSight, Elastic, CrowdStrike, Tanium.

Responsibilities

• Engineer cybersecurity solutions aligned with Zero Trust architecture pillars: identity, devices, networks, applications/workloads, data, and analytics.
• Implement technical controls supporting continuous verification, micro-segmentation, and access enforcement.
• Support AF IC Zero Trust initiatives, including ICAM modernization, data tagging, and ABAC enforcement.
• Integrate security tools and platforms such as SIEM, EDR, SOAR, identity providers, and boundary security systems.
• Develop and maintain security documentation: system security plans, architecture diagrams, configuration standards, and POA&Ms.
• Participate in and support AF and IC accreditation activities following NIST SP 800-53, CNSSI standards, and DoD cybersecurity requirements.
• Conduct security assessments, risk analyses, vulnerability scans, and remediation activities.
• Collaborate with enterprise architects, cloud engineers, and mission partners to design secure workflows and secure data flows.
• Evaluate emerging Zero Trust technologies and recommend adoption strategies to enhance AF IC mission resilience.

Skills

TS/SCI

AF IC experience

IAT III

Security certifications

NIST RMF

Vulnerability management

SIEM tools

DoD guidelines

Tools

Splunk

ArcSight

Elastic

CrowdStrike

Tanium

Job description

The engineer will work on continuous verification, ABAC enforcement, and ICAM modernization, while integrating SIEM/EDR/SOAR tools and maintaining system security documentation. Strong DoD guidelines familiarity is essential.