CyberSecurity Engineer III
About The Position
PMAT is seeking a CyberSecurity Engineer III to support the design, deployment, security, administration, and sustainment of secure, mission-critical computing environments in government and defense settings. The role spans on-premises infrastructure, private cloud, virtualization, Linux and Windows systems, network infrastructure, automation, and compliance-driven security architectures. The engineer will collaborate with infrastructure, cybersecurity, and engineering teams to maintain secure and reliable environments, resolve technical challenges, remediate vulnerabilities, and support systems through development, authorization, and operations. This is a remote position in the United States. Applicants must be U.S. citizens with no dual citizenship and hold an active DoD Top Secret clearance with SCI eligibility. Travel is estimated at 20%, for CONUS customer engagements, technical coordination, system support, or mission requirements. Work may take place at PMAT offices as needed and, in some cases, at a government facility. The position requires a bachelor’s or master’s degree in a STEM field, CompTIA Security+ and Network+ certifications (or obtaining them within 12 months of hire), and ITIL Foundation certification. Additional DoD 8570 or DoD 8140 certifications are a plus.
Requirements
- Five or more years of experience in infrastructure engineering, systems administration, network engineering, or a closely related technical field.
- Experience administering VMware ESXi and vSAN virtualization environments.
- Experience deploying, configuring, administering, and maintaining RHEL and Windows Server environments.
- Experience supporting infrastructure automation using Ansible, Terraform, or related automation and Infrastructure as Code technologies.
- Experience implementing or remediating security controls in accordance with DISA STIGs and NIST SP 800-53 requirements.
- Strong understanding of on-premises cloud architectures, enterprise virtualization, and secure infrastructure operations.
- Experience identifying, tracking, and remediating vulnerability backlogs in regulated or compliance-driven environments.
- Experience supporting government, defense, or other security-focused technical environments.
- Ability to work effectively with infrastructure, networking, cybersecurity, and software teams in security-conscious environments.
- Bachelor’s or master’s degree in a STEM field.
- CompTIA Security+ certification or ability to obtain it within 12 months of hire.
- CompTIA Network+ certification or ability to obtain it within 12 months of hire.
- ITIL Foundation certification.
- U.S. citizenship is required; dual citizenship is not permitted.
- An active DoD Top Secret clearance with SCI eligibility is required.
Nice To Haves
- Prior experience supporting government or other highly regulated organizations.
- Experience supporting LAN/WAN environments, routing, switching, OSPF, or BGP.
- Experience with ACAS, Splunk, Nessus, Veeam, Horizon, Dell Wyse, or related enterprise infrastructure technologies.
- Experience serving as a technical lead, mentoring junior engineers, or coordinating technical work across multiple teams.
- Familiarity with DevSecOps workflows and tools in restricted or compliance-driven environments.
- Experience supporting ATO packages, security control assessments, compliance documentation, or cybersecurity audits.
- Experience with Jenkins, PDQ, WSUS, Active Directory, Atlassian Suite, YUM repositories, databases, or enterprise monitoring platforms.
- Additional DoD 8570 or DoD 8140 certifications.
Responsibilities
- Support the design and administration of secure computing infrastructure in on-premises and private cloud environments.
- Support the design and administration of enterprise VMware ESXi and vSAN virtualization platforms.
- Deploy, configure, administer, and maintain RHEL and Windows Server systems.
- Implement and remediate security controls in accordance with NIST SP 800-53 Revision 4 and Revision 5 requirements and DISA Security Technical Implementation Guides.
- Support automation of system builds, patching, configuration, and hardening using Ansible, Jenkins, PDQ, WSUS, and related tools.
- Support vulnerability identification, tracking, and remediation using ACAS, Nessus, Splunk, and other cybersecurity tools to reduce system attack surfaces.
- Support enterprise services and technologies, including Active Directory, databases, Veeam, Horizon, Atlassian Suite, YUM repositories, and monitoring platforms.
- Support the design and administration of LAN/WAN and virtualized network infrastructure, including troubleshooting complex routing issues involving OSPF and BGP.
- Collaborate with engineering, cybersecurity, and technical teams to troubleshoot issues and implement secure infrastructure solutions.
- Support authorization efforts, including Authority to Operate packages, compliance documentation, control validation, and security audits.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
