Cyber Security Engineer

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. They are seeking a Cybersecurity Engineer to design, implement, and maintain enterprise security controls for a federal agency client, enforcing Zero Trust principles across cloud, network, and endpoint environments.

Responsibilities:

• Implement and maintain enterprise security controls aligned with NIST SP 800-53, including access control, configuration management, system and communications protection, audit and accountability, incident response, and system integrity control families
• Enforce Zero Trust Architecture principles per NIST SP 800-207, including continuous user and device verification, identity-centric security, and least privilege access
• Design and maintain RBAC, PAM, and MFA across enterprise systems; configure and manage IAM solutions and identity providers
• Configure and maintain centralized logging, monitoring, and SIEM integration across systems, applications, and cloud platforms
• Conduct continuous security monitoring, vulnerability assessments, and risk analysis; coordinate remediation per NIST RMF
• Secure cloud and hybrid environments (AWS, Azure), including configuration of security services, identity controls, and network protections
• Support incident response, including alert monitoring, containment, forensic collection, root cause analysis, and reporting
• Develop and maintain cybersecurity SOPs, security baselines, and asset inventories; ensure documentation supports audit readiness
• Support continuous real-time security monitoring operations through integration with SIEM, EDR/XDR, and cloud-native security platforms

Requirements:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field; relevant certifications such as CISSP or CISM and demonstrated enterprise experience may be considered in lieu of a degree
• CISSP, CISM, or equivalent senior security certification
• Experience in a federal government or legislative branch IT environment
• Familiarity with IRS 1075 or CUI data protection requirements
• Hands-on experience implementing NIST SP 800-53, NIST SP 800-207 (Zero Trust), and NIST RMF across enterprise environments
• Experience configuring and managing enterprise SIEM and EDR/XDR platforms for continuous monitoring and threat detection
• Experience designing and managing IAM, RBAC, PAM, and MFA solutions in enterprise environments
• Experience securing cloud environments, including AWS and Azure security services, identity controls, and workload protections
• Experience supporting incident response, forensic data collection, and root cause analysis
• 5+ years of cybersecurity engineering experience in an enterprise environment
• Must be a U.S. Citizen