Sr. Cybersecurity Engineer II (6545)

MetroStar•Washington, DC

14h•$174,000 - $200,000

About The Position

As Sr. Cybersecurity Engineer II, you’ll responsible for protecting Sensitive Compartmented Information (SCI) within classified Azure and AWS environments. This role focuses on preventing, detecting, and mitigating cyber risk while enabling mission delivery in alignment with ICD, DoD 8140, and Zero Trust Architecture (ZTA). The position emphasizes defensive security engineering, risk based decision making, and continuous authorization, ensuring security controls are engineered, enforced, monitored, and auditable across the Intelligence Community Information Environment (IC IE). We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers. If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent experience
Active TS/SCI clearance
7+ years of cybersecurity experience with strong cloud security engineering
Hands on experience securing Azure and AWS environments
Experience supporting ICD governed systems
Strong understanding of defensive security, Zero Trust, and risk management
Proficiency with Infrastructure as Code and security automation
Ability to brief risk and security posture to technical and government leadership

Responsibilities

Engineer and operate security controls supporting ICD risk management and authorization
Implement Zero Trust as an operational security model
Enforce continuous verification, least privilege, and access segmentation
Apply Zero Trust principles across identity, device, network, application, and data layers
Architect security boundaries, isolation mechanisms, and blast radius containment
Lead threat modeling and adversary focused security design reviews
Apply defense in depth strategies for classified workloads
Ensure SCI protection across compute, storage, and data flows
Enforce strong identity assurance using Azure AD and AWS IAM
Embed security controls into CI/CD pipelines using Infrastructure as Code
Implement policy as code, guardrails, and automated enforcement
Integrate security testing (IaC scanning, container security, secrets detection)
Integrate cloud telemetry with IC approved SIEM and monitoring platforms
Define detection use cases aligned to cloud threat vectors