Pillar Lead: Application & Endpoint Specialist (R-00211)

This role bridges security engineering and day to day operations by supporting implementation of security capabilities, evaluating technical solutions, maintaining cybersecurity tools, and helping operational teams translate security architecture into effective, repeatable practices. The Cybersecurity Engineer works closely with vulnerability management, incident response, RMF, and ISSO teams to ensure engineering activities directly support operational risk reduction and continuous improvement.

Position Responsibilities

• Develop reusable application, workload, cloud, and infrastructure Zero Trust patterns.
• Assess system architecture, workload interactions, service dependencies, security controls, and implementation constraints.
• Define application and workload policy enforcement, secure service communication, secrets management, and workload identity requirements.
• Support engineering plans, deployment sequencing, pilots, testing, validation, and operational readiness assessments.
• Document common variants for cloud, hybrid, legacy, and mission-critical system environments.
• Identify architectural deviations and lessons learned that should refine future enterprise patterns.

Job Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field.
• Five or more years of application, cloud, infrastructure, platform, or systems architecture experience.
• Experience with enterprise application architectures, virtualization, containers, cloud platforms, APIs, and legacy integration.
• Working knowledge of Zero Trust application and workload security principles.
• Strong systems thinking, troubleshooting, and technical documentation skills.
Preferred Qualifications:
• Experience with Azure, AWS, Kubernetes, API gateways, service mesh, or modern application security controls.
• Experience supporting large Federal application portfolios.
• Experience modernizing legacy systems within security and availability constraints.
Preferred Certifications: One or more of the following is preferred:
• CCSP
• AWS Solutions Architect
• Azure Solutions Architect
• CISSP
• Security+