The Senior IT Systems Engineer builds, improves, and sustains classified infrastructure supporting engineering work. The role covers compute, virtualization, storage, networking, identity, endpoints, and security tooling in standalone and air-gapped environments.
Responsibilities
Build and operate classified infrastructure
Deploy, configure, and sustain Windows Server and Red Hat Enterprise Linux systems, virtualization clusters, enterprise storage, and core infrastructure services in standalone and air-gapped enclaves
Build and support VMware, Nutanix AHV/Prism, or similar virtualization environments
Support high-density compute for AI/ML, simulation, and engineering workloads, including GPU node provisioning, performance troubleshooting, capacity planning, and coordination with facilities on rack space, power, and cooling
Administer and support Active Directory, DNS, DHCP, Group Policy, PKI, certificate services, privileged access, and role-based access for isolated forests with no connection to corporate IT
Lead vulnerability analysis, patch management, security compliance, and remediation efforts across thousands of endpoints operating in highly secure environments including NIPRNet, SIPRNet, and JWICS.
Compensation
Annual Salary: $100,000–$130,000, depending on experience and qualifications.
Responsibilities
Analyze ACAS/Nessus scan results to identify, assess, and prioritize security vulnerabilities across enterprise systems.
Develop and coordinate remediation plans for CAT I, II, and III vulnerabilities, ensuring compliance with DoD requirements and established deadlines.
Engineer, test, and deploy operating system and third-party security patches using MECM/SCCM and Microsoft Intune.
Evaluate systems against DISA STIGs using STIG Viewer, SCAP Compliance Checker, and other security assessment tools.
Maintain Plans of Action and Milestones (POA&Ms) in eMASS, documenting security risks, mitigation strategies, and remediation progress.
Provide day‑to‑day security support for classified SCI and SAP systems, lead RMF activities, develop SSPs, coordinate vulnerability management, and advise program leadership on cybersecurity risks.
Responsibilities
Provide cybersecurity oversight for classified SCI and SAP information systems
Lead and coordinate RMF activities, security control implementation, system authorization efforts
Develop, review, and maintain System Security Plans (SSPs) and related documentation
Collaborate with system engineers, network architects, and program teams to integrate cybersecurity requirements
Support cybersecurity integration for HPC, AI, advanced computing platforms, and data center infrastructure
Requirements
BS or BA degree in information technology or a related technical field
Nice to have: CISSP
Nice to have: CGRC
Nice to have: CompTIA SecurityX
Nice to have: ISSO or ISSE experience within DOE, DoW, or the Intelligence Community
Provide direct support to the Advance Electronic Systems (AES) team, handling hardware/software setup, connectivity issues, and user-related tasks within a SDLC framework.
Compensation
The projected compensation range for this position is $70,200.00-$117,000.00.
Responsibilities
Execute the full System Development Life Cycle (SDLC) from initial receipt of hardware/software through decommissioning.
Plan system requirements by analyzing mission needs, hull-type variants, and Risk Management Framework (RMF) constraints.
Design tailored system architectures and Secure Host Baseline (SHB) images using Microsoft Deployment Toolkit (MDT), Windows Assessment and Deployment Kit (ADK), and Group Policy.
Develop PowerShell automation for naming conventions, policy enforcement (Microsoft Edge, Windows Defender), and post-build validation scripts.
Implement configurations by building, testing, and duplicating SHB images across hull types.
The base salary for this position will fall between $150,000 and $170,000. Your ultimate compensation will be determined by professional background, technical proficiency, seniority, and regional cost factors. Furthermore, this opportunity includes potential eligibility for equity awards and discretionary bonuses, rounding out a comprehensive total rewards offering.
Responsibilities
Execute all phases of NIST SP 800-37 DoD RMF lifecycle for systems in DoD IL4/IL5 environments
Own eMASS authorization packages end-to-end
Manage DISA PPSM registrations and reconcile ports, protocols, and services data flows
Author System Security Plans, control implementation narratives, Plans of Action & Milestones, and supporting RMF artifacts
Drive continuous monitoring operations and push findings to closure