Journeyman Cybersecurity Engineer

Support a Department of State GMOS environment by designing, implementing, and validating secure IT solutions across physical, virtual, and cloud platforms.

• Design and implement security solutions for physical data centers, virtual hosting environments, and cloud platforms using defense-in-depth and zero-trust principles
• Ensure operating environments, system configurations, and infrastructure deployments meet Department of State and DT physical and information security requirements
• Apply security best practices across the system development lifecycle while meeting DOS security policies
  , FISMA requirements,
  NIST 800-53 controls, and STIGs
• Build network security capabilities including high-availability load balancing
  , DDoS detection and mitigation
  , intrusion prevention systems
  , and web application firewalls
• Implement and configure FedRAMP-compliant cloud systems, coordinating with the DOS Cloud Computing Governance Board (CCGB) for data sovereignty and boundary protections
• Provide security expertise for infrastructure architecture, including security architecture reviews,
  threat modeling
  , and risk assessments
• Implement monitoring, logging, and alerting integrated with Enterprise Monitoring and SIEM platforms
• Use Dev Sec Ops  tooling to build and optimize CI/CD pipelines and automate security validation and vulnerability scanning with Ansible
  , Terraform
  , Jenkins
  , Git Lab
  , and Sonar Qube
• Perform security assessments, vulnerability testing, and security control validation; produce technical reports with remediation recommendations
• Coordinate with infrastructure engineers, application developers, security analysts, and Government stakeholders to deliver secure technical solutions

• Bachelor’s degree plus 4 years of experience in related fields (cybersecurity engineering, security architecture, systems security engineering, network security, or Dev Sec Ops ); equivalencies considered
• Active Top Secret Clearance
• Experience with security engineering, security architecture design, security controls implementation, and secure system design principles
• Knowledge of information security frameworks including NIST 800-53
  , FISMA
  , Risk Management Framework (RMF), and Federal security requirements
• Understanding of network security technologies including firewalls
  , IDS/IPS
  , load balancers
  , DDoS mitigation
  , and cloud security architectures (
  AWS
  , Azure
  )
• Proficiency with Dev Sec Ops  tooling:
  Ansible
  , Terraform
  , Jenkins
  , Git Lab
  , Sonar Qube
  , and CI/CD pipeline security integration

• Ansible
• Terraform
• Jenkins
• Git Lab
• Sonar Qube
• CI/CD pipelines
• NIST 800-53
• FISMA
• Risk Management Framework (RMF)
• STIGs
• SIEM platforms
• Splunk
• Arc Sight
• QRadar
• FedRAMP
• DOS Cloud Computing Governance Board (CCGB)
• AWS
• Azure
• IDS/IPS
• Load balancers
• DDoS mitigation
• Firewalls
• Intrusion prevention systems
• Web application firewalls
• Enterprise Monitoring infrastructure

• Healthcare
• Wellness
• Financial
• Retirement
• Family support
• Continuing education
• Time off benefits
• Flexible time off benefit
• Robust learning resources

• Location: Ashburn, VA (onsite)
• Pay range: USD 94, per year
• Job category: Engineering
• Time type: Full time
• Employee type: Regular
• Minimum clearance required to start: Top Secret
• Travel: Up to 10% local

• Prior experience supporting federal agencies, especially the Department of State
• Professional security certifications such as CompTIA Security+, CISSP, CEH, CCSP, or GIAC certifications
• Experience with FedRAMP authorization processes, STIGs, and SIEM platforms (Splunk, Arc Sight, QRadar)
• Background in threat modeling methodologies, penetration testing, and vulnerability assessment tools

What you can expect: A culture of integrity, an environment of trust, and a focus on continuous growth.