Cybersecurity Engineer - Architecture & Deployment SME
Role details
Job location
Tech stack
Job description
Join a mission-focused cybersecurity team supporting critical DoD environments. This role is a hands-on engineering leadership position responsible for architecting, deploying, and leading enterprise ACAS (Assured Compliance Assessment Solution) implementations.
This is not a tools administration role-you will own the design, deployment, and lifecycle management of enterprise vulnerability scanning capabilities while providing technical leadership across the team. What you will do:
- Architect, design, and lead enterprise deployment of ACAS solutions, including scanner architecture and repository design
- Develop and implement baseline configurations aligned with DoD STIGs and cybersecurity policies
- Own the full deployment lifecycle (design * implementation * testing * sustainment)
- Lead system testing, validation, and integration of security tools across enterprise environments
- Serve as the technical lead and escalation point for advanced troubleshooting and mission-impacting issues
- Oversee, prioritize, and direct work of junior and journeyman engineers and administrators
- Provide hands-on mentorship, training, and technical guidance to security personnel
- Drive continuous improvement of vulnerability scanning, reporting, and compliance processes
- Ensure alignment with DoD cybersecurity frameworks, ACAS architecture standards, and operational requirements, Which of the following best describes your experience with vulnerability scanning tools?* Have you had responsibility for leading or assigning work to junior/journeyman engineers?* What size teams have you led in engineering efforts?* Have you led the full lifecycle deployment of a cybersecurity tool (design * implementation * testing * sustainment)?* In past roles, were you the primary escalation point for complex or mission-impacting issues?* Do you have experience working with DoD STIGs and ACAS in a DoD environment?* Do you meet DoD 8140/8570 IAT Level II (or higher) certification requirements?* Do you reside within commuting distance of this role?* What type of work environment are you looking for?* Fully OnsiteHybridFully Remote Are you a U.S. citizen?* Do you have an active DOD Security Clearance?* What are your salary expectations?* The following questions are entirely optional. To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more. Gender Race/Ethnicity
Requirements
-
10+ years of cybersecurity engineering experience (not limited to administration or operations)
-
Proven experience architecting and leading enterprise deployments of ACAS or similar vulnerability management platforms
-
Demonstrated experience designing: o Scanner architectures o Repository structures o Baseline configurations
-
Experience managing end-to-end deployment lifecycle of cybersecurity tools
-
Experience leading large-scale or enterprise-level implementations (multi-system / multi-team environments)
- Technical Leadership
- Proven experience leading engineering teams or tasking junior personnel
- Demonstrated ability to mentor, train, and develop junior/journeyman engineers
- Experience serving as a technical escalation point for complex or mission-critical issues
- Technical Environment
-
Deep knowledge of: o ACAS architecture and scanning operations o DoD STIGs and vulnerability management processes o Enterprise cybersecurity engineering practices
-
Experience with system hardening, compliance validation, and security tool integration
- Certifications & Clearance
- DoD 8140 / 8570 IAT Level II (or higher)
- ACAS certification (required based on role)
- Active clearance (as required by contract)
How you will wow us:
- Experience implementing ACAS in large DoD enterprise environments
- Familiarity with Zero Trust architectures
- Experience integrating vulnerability tools with SIEM / security analytics platforms
- Scripting/automation experience (PowerShell, Python, etc.)
- Background supporting mission-critical or classified environments
Benefits & conditions
Invitation for Job Applicants to Self-Identify as a U.S. Veteran
- A "disabled veteran" is one of the following:
- a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
- a person who was discharged or released from active duty because of a service-connected disability.
- A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
- An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
- An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.