Responsibilities:

-- Automate cybersecurity architecture within the infrastructure as code (IaC) for on-prem and distributed platforms and mission applications with end-to-end integrated Zero Trust capability to deliver high quality software outcomes.  

-- Engineer and integrate security controls into the IaC, platform as a service (PaaS), and mission applications to automate and streamline outputs for IAM, encryption, logging, and monitoring compliance validation.

-- Streamline hardening of IaC, PaaS, and mission applications leveraging STIG/SRGs, CIS benchmarks, and industry best practices.

-- Support secure software deployments, containerized platforms and mission applications.

-- Coordinate and engineer cybersecurity tools pipeline integration, enforcement, and automate tool outputs into dynamic decision-making dashboards.

-- Engineer and automate RMF security control implementation into the IaC, PaaS, and mission applications to modernize and rapidly produce body of evidence for continuous delivery, monitoring, updates, and improvements.

-- Modernize vulnerability remediation outcomes and engineer continuous system resiliency, adaptability, drift correction, and responsiveness to updates.

-- Write Ansible playbooks and scripts and perform peer review of cyber engineer as well as software developer code commits.

-- Ensure end-to-end system patch management enforcement, SBOM, RBOM, and artifact generation.

-- Capable of collaborating cross-functionally with software development, IT, DevOps, hardware/engineering teams, and customer to continuously integrate and improve security posture throughout the SDLC.

Qualifications:

Required:

-- Active TS/SCI and an ability to obtain the required Polygraph.

-- Bachelor's degree in computer science, software engineering, cyber engineering, systems engineering, information technology, or a related field.

-- 7+ years’ experience in cyber engineering, with at least 5 years in moder software technologies.

-- Proven Kubernetes platform security and modular architectures, technical enterprise architecture, secure SDLC, and cloud-native security.

-- Deep technical understanding of cyber and security engineering toolsets and deployment methodologies, and SIEM, SAST, DAST, SCA, and vulnerability exposure technologies.

-- Hands-on experience with Zero Trust tools and implementation, micro-segmentation, and identity-centric security services.

-- Demonstrated IaC, PaaS, and mission application knowledge, to include ability to automate RMF, control engineering, metrics reporting, and telemetry pipelines.

-- Sec+ and/or CISSP certification, or an ability to obtain within 90 days of onboarding.

-- Experience in at least one or more scripting languages (e.g., bask, python, java, powershell, etc), and knowledge in Ansible playbooks and ArgoCD integration for automation.

-- Working knowledge in network protocols, TCP/IP stack, firewalls, and packet inspection tools on Linux, Windows, and Kubernetes system security.

Desired:

-- More than one industry certification (CISSP, GSEC, CEH, GCIH, CISSP Associate), or equivalent.

-- Familiarity in multiple programming / scripting languages to streamline automation.

-- Exposure to DevSecOps pipelines and tools (e.g., Jenkins, Terraform, Ansible, ArgoCD, etc).

-- Experience in performing engineering tasks, cross-enclave environments, classified systems, highly regulated environments, and compliance-as-code.

-- Knowledge of advanced threat modeling and adversary emulation techniques (e.g., MITRE ATT&CK, etc).

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is: