Cybersecurity Engineer

KeenLogic•Washington, DC

11d•Hybrid

About The Position

KeenLogic is seeking a Cybersecurity Engineer to support the Congressional Budget Office (CBO) by designing, implementing, and maintaining enterprise security controls that enforce Zero Trust principles, identity-centric access, least privilege enforcement, continuous monitoring, and threat detection across cloud, network, endpoint, and identity environments. The engineer will support enterprise cybersecurity operations, incident response, vulnerability management, identity and access management, cloud security, and compliance initiatives while ensuring alignment with federal cybersecurity standards and industry best practices. Work is primarily performed remotely; however, contractor personnel must be available to provide onsite support at the CBO Ford House Office Building in Washington, DC, as directed by the Government.

Requirements

U.S. Citizen and eligible for a Public Trust clearance
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related discipline (or equivalent experience)
7+ years of experience supporting enterprise cybersecurity operations, engineering, or security architecture
Experience implementing and maintaining security controls aligned with NIST SP 800-53
Experience supporting Zero Trust Architecture initiatives aligned with NIST SP 800-207
Experience with Identity & Access Management (IAM)
Experience with Multi-Factor Authentication (MFA)
Experience with Role-Based Access Control (RBAC)
Experience with Privileged Access Management (PAM)
Experience with SIEM platforms
Experience with EDR/XDR solutions
Experience with Vulnerability management tools
Experience with Security monitoring and incident response
Experience securing cloud environments (AWS and/or Azure)
Experience supporting federal cybersecurity compliance requirements
Strong analytical, troubleshooting, and documentation skills

Responsibilities

Support implementation, operation, and optimization of enterprise security platforms and services
Maintain security controls across cloud, on-premises, and hybrid environments
Support continuous monitoring and security operations initiatives
Assist with enterprise security posture improvements
Implement and maintain security controls aligned with NIST SP 800-53
Support Zero Trust Architecture initiatives in accordance with NIST SP 800-207
Participate in risk mitigation, continuous monitoring, and compliance activities
Support audit readiness and security assessment efforts
Configure and maintain identity and access management solutions
Implement and enforce RBAC, PAM, and MFA controls
Support authentication and authorization services
Ensure least-privilege access principles are consistently applied
Monitor and analyze security events and alerts
Support incident triage, investigation, containment, and remediation activities
Assist with forensic data collection and analysis
Perform root cause analysis and corrective action planning
Conduct vulnerability assessments and risk analysis
Coordinate remediation, patching, and mitigation activities
Secure AWS, Azure, and hybrid cloud environments
Implement secure configuration baselines and hardening standards
Support segmentation and access control strategies to protect sensitive systems and data
Develop and maintain cybersecurity SOPs, policies, and procedures
Maintain security documentation, system inventories, and configuration records
Participate in change management activities and security impact assessments
Collaborate with network, cloud, application, and engineering teams to resolve complex security challenges