Senior Tool Integration Engineer

Connected Logistics•Springfield, VA

6d•$150,000 - $160,000•Remote

About The Position

Connected Logistics is seeking a Senior Tool Integration Engineer (Lead Tool Integration & Automation Engineer) to support the Cybersecurity Architecture and Engineering Services supporting the Department of Veterans Affairs (VA) Office of Information Security (OIS) Cybersecurity Operations Systems Engineering (COSE) program. The Lead Tool Integration & Automation Engineer serves as the senior technical lead responsible for integrating, automating, engineering, and sustaining enterprise cybersecurity tools and capabilities. The position focuses on ensuring security technologies operate as an integrated ecosystem rather than as isolated products, enabling automated security operations, continuous monitoring, rapid detection and response, vulnerability management, compliance, and enterprise cyber defense. The engineer leads the design and implementation of integrations across cybersecurity platforms, enterprise infrastructure, cloud environments, applications, identity services, and IT service management capabilities. This includes developing APIs, automation workflows, scripts, connectors, orchestration processes, and data pipelines that enable security tools to exchange information and automatically initiate security and operational actions. This position works closely with cybersecurity architects, SOC personnel, security engineers, DevSecOps teams, cloud and infrastructure engineers, application teams, and system owners to translate cybersecurity requirements into reliable, scalable, and supportable technical solutions. In this role you will serve as the technical lead for cybersecurity tool integration, automation, and orchestration, providing engineering direction and technical oversight for enterprise security capabilities.

Requirements

Public Trust: T4 or T5 (TS)
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, or a related technical discipline or an Associate's degree in the above discipline with an additional 2 years of experience.
10 or more years of relevant experience in cybersecurity engineering, security architecture, systems engineering, enterprise tool integration, automation, or related technical disciplines.
Demonstrated experience designing and integrating enterprise cybersecurity tools and platforms in large, complex environments.
Strong experience developing system integrations using REST APIs, scripting, automation, and structured data formats such as JSON and YAML.
Experience designing or supporting cybersecurity automation and orchestration workflows.
Strong understanding of enterprise security technologies, cybersecurity architecture, networking, authentication, identity, operating systems, cloud platforms, and security operations.
Demonstrated ability to troubleshoot complex integrations spanning multiple technologies and organizational boundaries.
Experience translating cybersecurity requirements and architecture into implementable engineering solutions.
Strong technical documentation and communication skills, with the ability to communicate engineering decisions to architects, security professionals, developers, operations teams, and program leadership.
Ability to lead technical activities and mentor engineers in a complex enterprise environment.

Nice To Haves

Experience supporting U.S. Federal Government cybersecurity environments.
Experience integrating SIEM, SOAR, vulnerability management, endpoint security, cloud security, identity, ITSM/CMDB, and DevSecOps technologies.
Experience with cloud platforms and cloud-native security capabilities.
Experience implementing automation through infrastructure-as-code, configuration-as-code, CI/CD, or DevSecOps practices.
Familiarity with NIST Cybersecurity Framework, NIST SP 800-53, Risk Management Framework (RMF), Zero Trust Architecture, FISMA, and FedRAMP.
Relevant cybersecurity, cloud, or engineering certifications are desirable.

Responsibilities

Architect, design, implement, and maintain integrations between cybersecurity platforms and enterprise technologies using APIs, web services, event streams, message queues, connectors, scripts, and custom automation.
Integrate security technologies supporting capabilities such as SIEM, SOAR, vulnerability management, endpoint security, identity and access management, cloud security, application security, network security, threat intelligence, asset management, and continuous monitoring.
Design and implement automated cybersecurity workflows that reduce manual effort, improve consistency, accelerate response times, and enable repeatable security operations.
Develop and maintain scripts, integration services, automation frameworks, and orchestration workflows using technologies such as Python, PowerShell, REST APIs, JSON, YAML, and other appropriate integration technologies.
Engineer automated workflows for activities such as security alert enrichment, incident creation and escalation, vulnerability processing, asset reconciliation, compliance evidence collection, remediation tracking, and security control monitoring.
Integrate cybersecurity platforms with enterprise services including ITSM/CMDB, identity platforms, cloud services, DevSecOps pipelines, infrastructure monitoring, asset inventories, logging platforms, and data repositories.
Establish reliable and secure data flows between security systems, ensuring appropriate authentication, authorization, encryption, error handling, logging, data normalization, and transaction integrity.
Evaluate existing cybersecurity tools and integrations to identify capability gaps, redundant functionality, manual processes, interoperability issues, and opportunities for automation or consolidation.
Lead technical assessments, proofs of concept, tool onboarding, integration testing, production deployment, troubleshooting, and lifecycle engineering of cybersecurity capabilities.
Develop scalable integration patterns and reusable automation components that can be applied across applications, platforms, and security domains.
Ensure integrations are designed for availability, resiliency, scalability, maintainability, security, and operational supportability.
Troubleshoot complex issues spanning multiple cybersecurity products, APIs, networks, applications, operating systems, identity platforms, and cloud services.
Work with cyber architecture and engineering teams to ensure implementations conform to enterprise security architecture, Zero Trust principles, security policies, and applicable federal cybersecurity requirements.
Support implementation and continuous improvement of cybersecurity capabilities aligned with applicable NIST, FISMA, FedRAMP, and agency security requirements, as appropriate to the environment.
Develop and maintain technical documentation including integration designs, interface specifications, architecture diagrams, data flows, automation workflows, configuration documentation, operational procedures, and troubleshooting guides.
Establish engineering standards and best practices for cybersecurity tool integration, automation development, configuration management, testing, deployment, monitoring, and lifecycle maintenance.
Provide technical leadership, mentoring, design reviews, and engineering guidance to cybersecurity engineers and tool administrators.
Collaborate with vendors and product teams to resolve technical limitations, identify integration options, evaluate product capabilities, and implement supported interfaces.