Enterprise Security Engineering Lead

We are seeking an energetic and highly skilled Enterprise Security Engineering Lead to support the Dept of Veterans Affairs security architecture and engineering initiatives. In this pivotal role, you will lead a team of security engineers to design, implement, and maintain robust security systems that protect our IT infrastructure, cloud environments, and network architecture. Your expertise will ensure our security posture aligns with industry standards such as ISO 27001, NIST frameworks, and FIPS regulations. Join us to drive innovative security solutions, foster a culture of continuous improvement, and safeguard our digital assets against evolving cyber threats., * Lead the development and implementation of enterprise-wide security architecture, including network security, cloud security, and endpoint protection strategies.

• Oversee the deployment and management of firewalls (Cisco ASA), intrusion detection systems (IDS), SIEM platforms (Splunk, New Relic), and other security tools to monitor and analyze security events.
• Design and enforce access control management solutions utilizing identity and access management (IAM) architecture, SSO protocols, and authentication mechanisms such as PKI.
• Conduct comprehensive security risk assessments and investigations aligned with NIST standards to identify vulnerabilities within IT infrastructure, including LAN/WAN networks, routing protocols (OSPF, BGP), and network protocols.
• Collaborate with DevSecOps teams to integrate security practices into the SDLC (Software Development Life Cycle) using tools like Terraform, Ansible, and CI/CD pipelines for secure cloud infrastructure deployment on platforms like AWS, Azure, or Google Cloud.
• Develop incident response plans, disaster recovery procedures, and incident recovery protocols to ensure rapid mitigation of cybersecurity incidents.
• Stay current with emerging cybersecurity trends, threat landscapes, and compliance requirements such as PCI DSS, FedRAMP, FISMA, and ISO 27002/27000 series standards.

• Bachelor’s Degree required, Master’s degree preferred.
• One of the following Certifications is required: CISSP, CISM, CASP
• Proven experience leading enterprise-level security engineering teams in complex IT environments with a focus on cybersecurity defense strategies.
• Deep understanding of computer networking concepts including LAN/WAN design, TCP/IP stack, routing protocols (EIGRP, OSPF), VPNs (IPsec), load balancing solutions, and network infrastructure management.
• Expertise in implementing security systems such as firewalls (Cisco ASA), IDS/IPS solutions, SIEM platforms (Splunk or similar), and endpoint security tools across diverse operating systems including Windows, Linux (Ubuntu/CentOS/Debian), macOS, Android/iOS devices.
• Strong knowledge of cloud computing architectures (AWS, Azure) with experience in cloud security best practices for PaaS/IaaS environments.
• Familiarity with encryption technologies including FIPS standards and PKI implementations for secure communications.
• Experience with vulnerability assessment tools like Nmap or Burp Suite along with vulnerability research methodologies to proactively identify system weaknesses.
• Solid understanding of information security compliance frameworks such as ISO 27001/27002/27000 series standards and risk management frameworks like RMF or DIACAP.
• Proficiency in scripting languages such as Python or Bash for automation of security tasks; experience with configuration management tools like Ansible is a plus.
• Excellent communication skills to articulate complex technical concepts clearly to both technical teams and executive leadership.

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Employee discount
• Flexible schedule
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Professional development assistance
• Referral program
• Retirement plan
• Tuition reimbursement
• Vision insurance