Journeyman Cybersecurity Engineer

About the role

CACI is seeking a Journeyman Cybersecurity Engineer for the Global Mission Operations Support (GMOS) contract, supporting the Department of State. This role offers a unique opportunity to enhance national security through advanced IT solutions. You will collaborate with experienced professionals in an innovative environment, guiding a high-performing team to deliver excellence. The GMOS contract aims to provide world-class IT support by modernizing and maintaining applications and infrastructure using an integrated IT Service Management approach. Join us to make a meaningful impact on a program of national importance.

Responsibilities

• Design and implement comprehensive security solutions for physical data centers, virtual hosting environments, and cloud platforms incorporating defense-in-depth strategies and zero-trust security principles
• Ensure all operating environments, system configurations, and infrastructure deployments conform to Department of State and DT physical and information security requirements
• Incorporate security best practices throughout engineering designs and system development lifecycle activities, ensuring compliance with DOS security policies, FISMA requirements, NIST 800-53 controls, and STIGs
• Design and implement network security solutions including high-availability load balancing, DDoS detection and mitigation systems, intrusion prevention systems, and web application firewalls
• Implement and configure FedRAMP-compliant cloud systems, coordinating with DOS Cloud Computing Governance Board (CCGB) to ensure data sovereignty requirements and boundary protections
• Support infrastructure architecture security development by providing technical security expertise, conducting security architecture reviews, and performing threat modeling and risk assessments
• Implement comprehensive monitoring, logging, and alerting capabilities integrated with Enterprise Monitoring infrastructure and SIEM platforms
• Leverage DevSecOps tooling including Ansible, Terraform, Jenkins, GitLab, and SonarQube to construct and optimize CI/CD pipelines, automating security validation and vulnerability scanning
• Conduct security assessments, vulnerability testing, and security control validation for new and existing systems, generating detailed technical reports with remediation recommendations
• Collaborate with infrastructure engineers, application developers, security analysts, and Government stakeholders to implement secure technical solutions and promote security engineering best practices

Requirements

• Bachelor's degree + 4 years of experience in related fields, such as cybersecurity engineering, security architecture, systems security engineering, network security, or DevSecOps; equivalencies considered.
• Active Top Secret Clearance
• Proven experience with security engineering, security architecture design, security controls implementation, and secure system design principles
• Demonstrated knowledge of information security frameworks including NIST 800-53, FISMA compliance, Risk Management Framework (RMF), and Federal security requirements
• Strong understanding of network security technologies including firewalls, IDS/IPS, load balancers, DDoS mitigation, and cloud security architectures (AWS, Azure)
• Proficiency with DevSecOps tooling such as Ansible, Terraform, Jenkins, GitLab, SonarQube, and knowledge of CI/CD pipeline security integration

Qualifications

• Prior experience supporting federal agencies, especially the Department of State
• Professional security certifications such as CompTIA Security+, CISSP, Certified Ethical Hacker (CEH), Certified Cloud Security Professional (CCSP), or GIAC certifications