Secure Enclave System Engineering Lead

Type of Requisition:

Regular

Top Secret

Top Secret/SCI

None

IT Infrastructure and Operations

Continuous Monitoring, Cybersecurity, People Management, Systems Design, Systems Engineering

None

15 + years of related experience

Yes

SYSTEMS ENGINEER SME

Advance how our customers operate while you advance your career. Join GDIT as a Systems Engineer SME and build an impactful career in enterprise IT, collaborating with people who are driven and resourceful like you.

As a Systems Engineer SME, the work you’ll do at GDIT will directly support the mission of our customer. You will play a key role in architecting, securing, and sustaining a classified workstation enclave that enables a compliant, secure, and highly available environment.

• Lead the architecture, engineering, and operations & maintenance (O&M) of the classified workstation enclave, including software/hardware license management and day-to-day team operations
• Collaborate with Customer and Government stakeholders, security teams, and engineering staff to plan, design, implement, and sustain secure workstation solutions
• Drive continuous improvement in security posture, system performance, and team efficiency by managing activities, milestones, risks, and deliverables, and recommending enhancements to architectures and processes
• Apply deep expertise in RMF, NIST 800-53, Continuous Monitoring (Con Mon), ISSO/ISSM practices, and secure workstation engineering to ensure compliant implementation
• Lead the day-to-day team operations of the classified workstation environment
• Manage and report on team activities, milestones, risks, and deliverables
• Provide technical and security expertise for enclave build, configuration, and O&M
• Review current system and process architectures and recommend improvements
• Prepare and deliver test plans, technical briefings, and product recommendations
• Maintain the Continuous Monitoring (Con Mon) program with RMF support, including all ISSM/ISSO artifacts
• Coordinate with the Customer on shared and inherited security controls and required documentation
• Ensure ongoing maintenance and accuracy of the System Security Plan (SSP) and all appendices
• Oversee engineering procedures, artifacts, and playbooks for core security controls, including:
• Change Management:
  Documented, followed, and auditable
• Vulnerability Management:
  Full lifecycle documentation, including monthly POA&M updates
• Security Monitoring & Incident Response:
  Alert triage, escalation, and reporting aligned with the IR Plan
• Support Customer-led Con Mon validation activities
• Lead annual security attestation preparation and execution

Bring your technology expertise and drive for innovation to GDIT. The Systems Engineer SME must have:

• Experience managing engineering activities for cyber-compliant DoW system environments (classified preferred).
• Experience maintaining cybersecurity compliance and RMF/Con Mon activities aligned with ISSO/ISSM-responsibilities.
• Hands‑on expertise in leading or overseeing technical or engineering teams in secure environments, specifically workstation environments.
• Hands‑on expertise in engineering DoW system environments, vulnerability management, change management, incident response, and continuous monitoring.
• Strong knowledge of NIST 800-53, RMF, and shared/inherited security controls.
• Ability to communicate effectively with senior Customer and Government stakeholders.
• Experience developing or maintaining SSPs, Con Mon packages, or audit/assessment documentation.
• Experience supporting secure workstation enclaves
• Familiarity with DoW or Federal cybersecurity frameworks.

Education:

Bachelor of Arts/Bachelor of Science

Experience:

15+ years of related experience

Certification:
Must be DoD 8140 / 8570.01-M compliant (e.g., Security+ or equivalent

Security clearance level:
Active Top Secret clearance

Role requirements:

Location - Onsite with 5-15% travel.

At GDIT, the mission is our purpose, and our…