TIC 3.0 Security Engineer

TIC 3.0 Security Engineer

Role Overview
The TIC 3.0 Security Engineer will support NIH s TIC 3.0 modernization efforts by designing, implementing, and operationalizing TIC-aligned security architectures across hybrid cloud and on-premises environments. This role focuses on hands-on engineering, compliance mapping, and Zero Trust enablement.

Responsibilities

• Implement TIC 3.0-aligned security controls, including endpoint detection/response, micro-segmentation, DLP, malware filtering, and resource containment.
• Engineer Policy Enforcement Point (PEP) solutions and integrate with ServiceNow Catalog for TIC-as-a-Service.
• Support onboarding of NIH critical systems (AWS/Azure) into TIC 3.0 frameworks.
• Develop target state architectures, including remote access security, endpoint encryption, and network segmentation.
• Perform compliance assessments against CISA TIC 3.0 guidelines and NIH security policies.
• Support integration of enterprise monitoring capabilities for TIC services.

Qualifications

• BS in Computer Science, Cybersecurity, or related field.
• 5+ years in cybersecurity engineering, with direct experience in TIC 3.0 or Zero Trust implementations.
• Hands-on experience with AWS GovCloud and Azure Government.
• Familiarity with ServiceNow, ICAM, and cybersecurity monitoring tools.
• Certifications preferred: CISSP, CCSP, or equivalent.