Lead Engineer, Systems Engineer, Cybersecurity

Position Summary

The Lead Engineer is the senior technical authority for the MEDXS/MEDEX enterprise, owning the end-to-end system architecture and serving as the final technical arbiter for design, integration, and cybersecurity engineering decisions. This position translates Government mission requirements into executable technical baselines, leads the engineering team in delivering sustainment and modernization changes, and guarantees that every architectural change preserves the system's Authorization to Operate and its ability to move clinical and executive health data reliably between CONUS enterprise nodes and forward-deployed OCONUS theater nodes.

The Lead Engineer is expected to hold expert-level, hands-on knowledge of MEDXS/MEDEX system architecture and to personally lead resolution of the most complex technical failures. Primary duty station is the Defense Health Headquarters (DHHQ), Falls Church, Virginia. On-site presence is required; telework is by Government approval only and is not guaranteed.

• Serve as the authoritative technical lead for MEDXS/MEDEX system architecture, owning the as-built and to-be architecture baselines, interface control documentation, and system design specifications.
• Provide expert-level engineering analysis of the full MEDXS/MEDEX stack, including application tiers, data tiers, integration and messaging interfaces, authentication and authorization services, and the transport network connecting enterprise and theater nodes.
• Lead engineering design reviews, technical interchange meetings, and Preliminary and Critical Design Reviews; develop and defend trade studies and alternatives analyses with quantified cost, risk, schedule, and performance impacts.
• Direct, mentor, and technically supervise the Senior System Engineers, System Engineers, and System Administrators; allocate engineering tasks, set technical standards, and review work products for quality and compliance.
• Perform Information Assurance System Architect and Engineer (IASAE) Level II duties: design security architecture and controls into the system, define the security requirements traceability, and validate that implemented controls satisfy the assigned RMF control baseline.
• Own the cybersecurity engineering posture: lead STIG application and tailoring, vulnerability scan analysis (ACAS/Nessus), POA&M development and burn-down, IAVA/IAVB compliance, and remediation of findings within Government-directed timelines.
• Serve as the principal technical contributor to RMF artifacts and eMASS packages supporting Authorization to Operate, Interim Authorization to Test, and reauthorization actions, including System Security Plans, security assessment procedures, and control implementation statements.
• Lead the engineering of OCONUS node deployments: site surveys, bandwidth and latency analysis, hardware and virtualization sizing, disconnected and intermittent-bandwidth operating modes, data replication strategy, and cutover and rollback planning.
• Design and validate high availability, backup, disaster recovery, and continuity of operations architecture; define and test recovery time and recovery point objectives against mission requirements.
• Chair or serve as the senior technical voting member on the Configuration Control Board and Change Advisory Board; perform technical impact assessment on every proposed change and approve or reject implementation plans and rollback procedures.
• Lead root cause analysis for Severity 1 and Severity 2 incidents and recurring problem records, producing formal RCA documentation with permanent corrective action and preventive engineering changes.
• Establish and enforce engineering standards: build and hardening baselines, golden images, infrastructure-as-code patterns, patch and release engineering processes, naming and addressing standards, and documentation requirements.
• Direct capacity and performance engineering: monitor utilization trends, model growth, and produce technology refresh and capacity expansion recommendations for Government planning and budgeting.
• Evaluate emerging technologies and provide the Government with written technical recommendations on modernization opportunities, product selection, and system lifecycle decisions.
• Author and maintain the authoritative technical documentation library, including system design documents, network and data flow diagrams, installation and configuration guides, standard operating procedures, and disaster recovery…