Cybersecurity Engineer

We are seeking an experienced Senior Systems Engineer - Data Security to support advanced cybersecurity and data protection initiatives in highly regulated environments. This role focuses on designing and enforcing secure data retention, identity, and access control strategies aligned with government regulations and Zero Trust principles. The ideal candidate brings deep technical expertise in identity management, automation, and data protection technologies to safeguard sensitive systems and information., * Design, engineer, and implement advanced data protection solutions beyond traditional encryption.

• Provide expert guidance on Identity and Access Management (IAM) principles and best practices.
• Lead development and implementation of Zero Trust data protection strategies, including encryption, tokenization, and data masking.
• Design and enforce identity-centric access controls, granular permissions, and least-privilege policies.
• Implement and manage encryption for data at rest, in transit, and during processing.
• Deploy and manage security monitoring and analytics tools to detect anomalies, threats, and vulnerabilities.
• Define and enforce data retention and compliance policies aligned with government regulations.
• Support strong authentication methods including MFA, biometric authentication, and smart card solutions.
• Automate infrastructure deployment and security operations using Linux scripting, Python, and PowerShell.
• Manage and operate Privileged Access Management (PAM) and secrets management solutions.

Internet Security, Access Control, Government Regulations, Systems Engineering, Internet Security, Automation, Identity Data Management, Information/Data Security (InfoSec), Cryptography, Technical/Engineering Design, * Active TS/SCI clearance with Polygraph.

• Deep understanding of Windows Active Directory, including Domain Services configuration and management.
• Expertise implementing system and security logging across Windows, Linux, and network devices.
• Experience with secrets management tools such as HashiCorp Vault, Ansible Vault, or equivalent.
• Strong experience configuring Linux authentication, domain integration, and least-privilege access controls.
• Ability to design and manage Multi-Factor Authentication (MFA) environments for both domain-joined and standalone systems.
• Expertise managing network segmentation and traffic controls using tools such as iptables, nftables, Illumio, or similar.
• Familiarity with enterprise monitoring and vulnerability scanning tools, including the ability to interpret and remediate findings.

Desired

• Systems administration or IT certifications in Linux, Microsoft, or networking disciplines.
• Experience with VMware or other virtualization technologies.
• Strong communication and presentation skills, with the ability to explain complex technical concepts to diverse audiences.

2026 Feb 26th CyberSecurity - CACI International