Principal IT Systems Security Engineer

BAE Systems Inc. is hiring an on-site Principal IT Systems Security Engineer for the IT Operations Team in Rockville, MD.

• Operate, maintain, and dispose of Information Systems (IS) in alignment with approved security policies and practices
• Perform automated and manual system assessments to verify compliance with DISA STIGs and SCAP tooling
• Develop and administer Windows operating system environments
• Maintain and configure Active Directory (AD) environments, including structures and configuration
• Develop and apply Group Policy Objects (GPOs) for standalone and networked information systems
• Ensure system security measures align with applicable government and organizational policies, including:
  • NIST SP 800-37 (RMF)
  • NIST SP 800-53
  • NIST SP 800-171
  • CMMC
  • Internal standards
• Support ISSO/ISSM activities by creating and reviewing System Security Plans (SSPs) for IS accreditation
• Configure and maintain system backups to support data recovery
• Automate tasks using scripting technologies
• Configure systems and networks to use Public Key Infrastructure (PKI)
• Identify, monitor, and remediate IS Plan of Action and Milestones (POA&Ms)
• Develop and maintain Windows Servers
  , Windows Workstations
  , and Linux systems supporting the IS lifecycle
• Implement and review information system backups according to system policy documentation
• Maintain endpoint security posture to help ensure information system protection
• Support Assessment and Authorization and other security testing or review events to reach accreditation milestones

• CompTIA Security+ or equivalent approved 8570/8140
  IAT level 2 certification, or ability to obtain within 6 months of hire
• Bachelor’s Degree (typically Computer Science, Information Technology, or similar) plus 6 years of relevant work experience
• Working understanding of NIST SP 800-53 controls, including determining applicable controls and documenting implementation
• Strong troubleshooting skills and ability to research and find technical solutions with minimal supervision
• Effective organizational, time management, and communication skills (written and verbal)
• Proven experience maintaining secure networks
• Previous systems administration and/or System Security Engineer experience

• DISA Security Technical Information Guidelines (STIGs)
• Security Content Automation Protocol (SCAP)
• Windows operating system
• Active Directory (AD)
• Group Policy Objects (GPOs)
• NIST SP 800-37 (RMF)
• NIST SP 800-53
• NIST SP 800-171
• CMMC
• Public Key Infrastructure (PKI)
• Windows Servers
• Windows Workstations
• Linux Operating Systems
• Scripting technologies
• Splunk

• Ability to harden applications and systems per DISA Security Technical Implementation Guides (STIGs)
• Ability to understand and remediate vulnerabilities identified by IVAMs
  , ACAS
  , and STIGs
• Experience administering Trellix Host Based Security System (HBSS) ePolicy Orchestrator (ePO) and Assured Compliance Assessment Solution (ACAS)
• Experience with VMware and Hyper-V virtualization technologies
• Working knowledge of Linux Operating Systems
• Strong knowledge of Active Directory, DNS, DHCP, and deploying security policies via group policy
• Experience deploying and maintaining Public Key Infrastructure (PKI)
• Experience deploying and maintaining zero trust architecture
• Ability to configure log forwarding, ingestion pipelines, and dashboards in Splunk
• Ability to identify anomalies, investigate alerts, and support remediation based on Splunk analysis

• Health, dental, and vision insurance
• Health savings accounts
• 401(k) savings plan
• Disability coverage
• Life and accident insurance
• Employee assistance program
• Legal plan
• Paid time off
• Paid holidays
• Paid parental, military, bereavement, and any applicable federal and state sick leave
• Employee recognition program to receive monetary or non-monetary recognition awards

Compensation: USD 118, per year

Location: Rockville, MD (onsite)