Professional Level

Engineer 3

Responsibilities

• Engineer and assess Zero Trust security capabilities across identity, devices, networks, applications, and data.
• Translate NIST, FISMA, RMF, FedRAMP, and agency security requirements into implementable technical controls and system security requirements.
• Support authorization and assessment activities by preparing and reviewing security documentation, control evidence, implementation statements, and remediation plans.
• Analyze security findings, vulnerabilities, and control gaps; develop and track Plans of Action and Milestones through closure.
• Advise system owners, architects, engineers, and program leadership on security architecture decisions, risk treatment, and compliance impacts.
• Assess cloud, hybrid, and on-premises environments for control implementation, continuous monitoring, and authorization readiness.
• Prepare clear technical reports, risk summaries, and briefings for program and customer stakeholders.

Requirements

• Seven or more years of cybersecurity engineering, security architecture, or security assessment experience in a Federal or similarly regulated environment.
• Demonstrated experience with the NIST Risk Management Framework, NIST SP 800-53 controls, FISMA, FedRAMP, and authorization to operate activities.
• Experience applying Zero Trust principles and assessing security controls in cloud, hybrid, and on-premises environments.
• Experience developing or reviewing security plans, assessment evidence, Plans of Action and Milestones, and remediation documentation.
• Ability to translate security and compliance obligations into technical requirements and practical implementation guidance.
• Bachelor's degree in cybersecurity, information technology, information systems, engineering, or a related field, or equivalent relevant technical experience.
• Strong written communication, analytical, and stakeholder briefing skills.