Cybersecurity Engineer (RMF/Zero Trust)
GovCIO · Arlington, VA
$220,000–$240,000from the description
Jul 24, 2026
Arlington, VA
Jul 25, 2026
What this job asks for AI summary
A senior cybersecurity engineering role focused on federal environments, where the primary work involves designing and operating Zero Trust architectures, applying NIST RMF controls, and supporting system authorization and continuous monitoring. Day-to-day responsibilities span vulnerability management, identity and access controls, SIEM tooling, cloud security, and producing compliance documentation. Suited to experienced practitioners with a strong RMF and Zero Trust background and an active Secret clearance.
Senior level · 12+ years · Washington-Arlington-Alexandria, DC-VA-MD-WV · Secret clearance · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $152,225 (middle half $125,286–$177,673). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The JD states 'Bachelor's with 12+ years of infrastructure/cloud engineering experience (or commensurate experience)' — because equivalent experience is explicitly accepted, the degree requirement is set to None.
The overall experience requirement is ambiguous: the qualifications header cites 12+ years of infrastructure/cloud engineering, while the Required Skills block separately states 5–10 years of cybersecurity experience. The higher figure (12) is used for the overall years minimum as it appears to be the primary role-level gate.
The role is described as 'hybrid/remote' but is based in Arlington, VA with a required active Secret clearance and DEA suitability — fully remote is unlikely given the federal security context; remote is set to false.
AWS and Azure appear only under 'Preferred Skills and Experience' as security certification tracks (e.g. 'AWS/Azure Security certifications'), not as hands-on platform requirements; both are marked preferred.
Security automation is mentioned in the required skills narrative but names no specific tool or platform, so it is not emitted as a discrete skill.
DEA suitability is an additional adjudication requirement beyond the Secret clearance; it cannot be represented in the clearance field but is noted here for hiring managers.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Zero Trust Architecture.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.