Job description
Description
Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.
Dragonfli Group is seeking a Mid Security Engineer to support a multi-year cybersecurity modernization program for a large federal agency. In this role you will plan, implement, upgrade, and monitor the security measures that protect the agency's networks and information, with day-to-day work centered on cloud environments and on the automation and AI-enabled capabilities the program is standing up. You will design and develop security solutions for complex engineering, system administration, and network problems, and you will help shape the interface, quality assurance, and performance standards that govern those solutions. This position suits an engineer with roughly 2 to 3 years of hands-on cybersecurity experience who is ready to own technical problems end to end while working alongside a security architecture and engineering team.
This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.
Responsibilities
Plan, implement, upgrade, and monitor security measures protecting agency networks, systems, and information
Ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure
Design and develop security solutions for complex problems, system administration issues, and network concerns
Perform systems management and integration functions, primarily in cloud environments
Support the integration and development of automated and AI-based solutions in complex cloud environments
Assist in designing interface standards, quality assurance standards, and performance standards, and perform cost-benefit analysis of modern, state-of-the-art information systems
Analyze available technologies and recommend which to adopt and how best to apply them
Support security engineering delivery to the agency's cybersecurity architecture and engineering function
Maintain, research, enhance, and engineer the agency's cybersecurity environment and toolsets to improve overall security posture
Contribute to the design and implementation of a resilient architecture that integrates Zero Trust principles, including secure deployment, validation, and continuous monitoring of security controls
Support Security Impact Assessments and help maintain interconnection and data exchange security agreements for secure cloud service integration
Requirements
Must-Have
Bachelor's degree in a technical or cybersecurity-related field
2 to 3 years of professional experience in cybersecurity with a working understanding of security engineering functions and capabilities
Demonstrated experience implementing, upgrading, or monitoring security controls and security tooling
Hands-on experience performing systems management and integration in cloud environments (AWS, Azure, or GCP)
Experience designing or developing security solutions for complex system administration or network problems
U.S. Citizenship or Permanent Residency, with all work performed within the continental U.S.
Ability to pass a federal agency suitability or background investigation
Preferred / Nice-to-Have
Prior federal contracting experience, particularly supporting a civilian agency cybersecurity program
Experience supporting or building automation, low-code/no-code, or AI-enabled security capabilities
Familiarity with Zero Trust architecture concepts and reference models
Familiarity with NIST SP 800-37 and NIST SP 800-53 control implementation from an engineering perspective
Experience with FedRAMP-authorized cloud services and the security agreements that govern their integration
Certifications such as Security+, CySA+, AWS Certified Security, Azure Security Engineer Associate, or GIAC equivalents
Skill(s)
Technical Skills
Cloud security engineering and cloud systems integration (AWS, Azure, or GCP)
Security control implementation, hardening, and configuration management
Security tooling administration: SIEM, vulnerability management, endpoint, and identity platforms
Automation and scripting (Python, PowerShell, Bash) and infrastructure-as-code concepts
AI-enabled and low-code/no-code security capability integration
Network and system architecture fundamentals, including segmentation and secure connectivity
Zero Trust principles and continuous monitoring of security controls
Technology evaluation, cost-benefit analysis, and standards development
Soft Skills
Clear written and verbal communication with both technical and non-technical audiences
Ability to work independently and as a contributing member of a distributed team
Comfort operating in a fully remote setting with a camera-on meeting culture
Sound judgment about when to decide and when to escalate
Collaborative posture with system owners, business owners, developers, and assessors
Attention to documentation quality and follow-through on commitments
Benefits
Dragonfli Group offers a comprehensive benefits package that includes:
Medical: Multiple POS health plan options including an HSA-compatible plan
Dental: PPO coverage for preventive, basic, and major services
Vision: Annual exam, frames, lenses, and contact lens allowance
401(k): Employer match up to 5% of eligible compensation
Long-Term Disability: 100% employer-paid coverage at 50% of pre-disability earnings
Life Insurance & AD&D: 100% employer-paid coverage valued at $10,000 each
PTO: 15–25 days annually based on tenure, plus 16 hours of Floating PTO from day one
Paid Federal Holidays: All 11 federal holidays observed
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.