Sr Principal Cyber Systems Engineer

Position: Sr Principal Cyber Systems Engineer #2018-2
RELOCATION ASSISTANCE:
Relocation assistance may be available

CLEARANCE REQUIRED FOR START:
Yes

CLEARANCE TYPE:
Secret

TRAVEL:
Yes, 10% of the Time
Description

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people s lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation s history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon.

We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they re making history.

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people s lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation s history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon.

We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they re making history.

Northrop Grumman Defense Systems is seeking a Senior Principal Cyber Systems Engineer - 2018-2.

This position is located in Huntsville, AL and supports the Sentinel program.

Job Description:

Administer systems based on Linux and Windows operating systems
Automate system deployment, operation and maintenance using Infrastructure as Code (IaC) and Configuration Management (CM) tooling
Work with microservices and distributed application architecture, such as containers, Kubernetes, and/or serverless technology
Implement clean and maintainable infrastructure-as-code that adheres to industry best practices
Automate cloud native technologies in air-gapped environments, deploy applications, and provision critical infrastructure
Design and implement security measures, such as firewalls, intrusion detection and prevention systems, and encryption
Implement and maintain security policies and procedures to comply with industry standards and regulations
Provide technical guidance and training to other team members and stakeholders
This engineer will bring Extensive knowledge of Linux internals (e.g. PAM, systemd, SELinux) and Windows internals (e.g. SAM, registry, secpol).
This engineer will be familiar with DNS concepts and basic networking concepts. Additionally, this engineer will have experience managing headless systems with Power Shell and Bash.

Basic Qualifications:

Sr Principal Cyber Software Engineer:
Bachelor s degree in Science with 8 years of experience; or Master s degree with 6 years of experience;
PhD with 4 years of experience or 4 additional year of experience in lieu of degree.
Must have an active U.S. Government DoD Secret security clearance at time of application, current and within scope, with an ability to obtain and maintain Special Access Program (SAP) approval within a reasonable period of time, as determined by the company to meet its business need.
Current Security + or equivalent certification or greater or ability to obtain, within 6 months or less of hire, DoD 8570 / AFMAN 17-1303 qualification at IASAE 2 level.
2+ years of experience in directory services protocols (e.g. LDAP, Kerberos, SAML, OAuth) with experience in integration and implementation
2+ years of experience managing headless systems with Power Shell and Bash
2+ years of experience implementing DISA STIGs on various Operating Systems and platforms.
Understanding basic networking principles, including TCP/IP, subnets, routing, and VLAN configurations
Proficiency in on-prem virtualization and cloud orchestration platforms (e.g., VMware vSphere, Open Stack, Microsoft Hyper-V, Nutanix)

Preferred Qualifications:

Active U.S. Government DoD Top Secret security clearance.
Experience automating OS deployments (e.g. kickstart/answer files, MDT, ansible)

Experience with large scale Active Directory deployments (e.g. DFS, sites and services, FSMO)
Competency in implementing access controls, identity management, and on-prem security best practices

Experience with implementing AD FS claims

Experience with certificate management implementation and principles.
Familiarity with scripting Windows Group Policy Objects (GPOs)
Experience scaling hyperconverged solutions
Familiarity with server hardware and rack management
Knowledge of virtualization,…