Systems Engineer - Security Security Clearance

Position: Systems Engineer - Security with Security Clearance
Purpose and Impact:
Come be a part of an exciting and ever-changing program that provides a comprehensive range of state-of-the-art solutions and hands-on assistance in designing, implementing, managing, and sustaining operations across various network environments for our customer. We provide an environment that fosters and supports innovation and valuing "outside-the-box" thinking to solve complex problems. There are several training opportunities for team members that want to learn new technologies and stay current with their technical skillset.

We are a highly technical group and nurture growth, with a technical culture of cross-trained teammates with opportunities to develop additional skillsets.

Work Schedule:

8hrs/day, 5days per week, all onsite. Must be able to support Thursday night patching after hours (starting at 5pm). Occasional travel will be available.

Essential Responsibilities:

The Systems Engineer - Security serves as a technical leader responsible for architecting, engineering, and sustaining enterprise-grade security solutions across complex IT environments. This role is deeply hands-on and requires the ability to design, build, implement, operate, and optimize security technologies that protect mission-critical systems. The Systems Engineer provides technical direction, mentors junior engineers, and drives security innovation across the organization.

The Engineer leads advanced research, evaluation, and integration of emerging security technologies to strengthen the enterprise security posture. They ensure that system hardware, operating systems, software, and security controls adhere to organizational policies, compliance frameworks, and mission objectives.

Key responsibilities include:

* Architect, implement, and maintain enterprise security controls and infrastructure components across Windows, Linux, and virtualized environments
* Lead the design, deployment, configuration, and lifecycle management of endpoint hardening and security tools (e.g., Ivanti, WSUS, Trellix, Tenable)
* Oversee patch management processes, including OS updates, third-party software updates, and administrative tool upgrades
* Provide expert-level troubleshooting, root-cause analysis, and performance optimization for complex security and infrastructure issues
* Evaluate, recommend, and lead the adoption of new security tools, technologies, and methodologies
* Develop and maintain security documentation, including SSPs, RMF artifacts, engineering diagrams, and operational procedures
* Design and implement security requirements within enterprise business processes and technical architectures
* Support vulnerability assessments, interpret results, and develop risk-based mitigation strategies
* Conduct system hardening, configuration baselining, and compliance scanning to ensure adherence to security standards
* Support and guide incident response activities, including forensic analysis and containment strategies
* Collaborate with cross-functional teams to ensure security is embedded throughout system life cycles
* Mentor and provide technical leadership to junior and mid-level security engineers
* Contribute to long-term security strategy, capability development, and continuous improvement initiatives
* Support a diverse set of enterprise networks and mission environments as part of a high-performing security engineering team Work Environment, Physical Demands, and Mental Demands:
Standard Work Environment

Minimum Requirements (Knowledge, Skills, and Abilities):
* 6+ years of progressive experience designing, engineering, and securing enterprise-scale IT systems across complex network environments
* Senior-level knowledge in architecting, deploying, and maintaining security infrastructure, including endpoint protection, vulnerability management, configuration management, and enterprise hardening solutions
* Demonstrated experience leading security engineering initiatives, including implementing advanced security controls, designing secure configurations, and overseeing patch and update strategies for Linux and Windows environments
* Extensive hands-on experience with enterprise security tools, such…