Systems Engineer, Senior Lead; BGPL
Listed on 2026-09-28
-
IT/Tech
Systems Engineer, Cybersecurity
Location
Washington, DC metro area, with travel to program locations.
Security ClearanceCurrent Top Secret clearance with SCI-eligibility and SAP-eligibility are required for this position. Only applicants with a current security clearance will be considered. Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.
Travel25-50% travel to support activities across multiple program locations.
CertificationsNone required. Desired: one of more of the following:
Security+, MCSE, ITIL.
$155,000 - $175,000.
MISSIONThis individual will lead a team responsible for endpoint deployment, configuration, and lifecycle management across multiple locations. This role ensures that infrastructure components, platforms, services, interfaces, security controls, and operational processes function together as a complete and supportable system.
The ideal candidate brings disciplined systems-engineering judgment rather than narrowly focused product expertise. Success requires the ability to understand the entire system, decompose complex requirements, manage interfaces and dependencies, evaluate tradeoffs, and verify that delivered capabilities meet mission and operational needs.
Qualifications- 7+ years of systems engineering experience, including endpoint management.
- Bachelor's degree in a related field or equivalent experience.
- Experience supporting classified or federal systems environments.
- Demonstrated experience leading or supporting large, geographically dispersed teams.
- Experience supporting Special Access Program (SAP) facilities, systems, or environments.
- Familiarity with the Risk Management Framework (RMF) and NIST SP 800-37/800-53 security authorization processes as they apply to classified endpoint systems.
- Relevant certifications (e.g., Security+, MCSE, ITIL).
- Experience with endpoint management tools and imaging platforms.
- Experience supporting Special Access Program (SAP) facilities, systems, or environments.
- Lead the design, deployment, and lifecycle management of endpoint systems across facility locations.
- Develop and enforce configuration and imaging standards for workstations, servers, and peripheral devices.
- Supervise or coordinate endpoint support staff across geographically dispersed sites.
- Support systems integration efforts with network, security, and facility teams.
- Troubleshoot escalated systems and endpoint issues.
- Diagnose complex issues that cross technical domains and organizational boundaries.
- Support capacity planning, performance analysis, patching, upgrades, technology refresh, and end-of-life planning.
- Develop automation that improves consistency, repeatability, security, and operational efficiency.
- Participate in incident response, problem management, root-cause analysis, and continuous improvement.
- Collaborate with architects, network engineers, cybersecurity professionals, application teams, operators, and mission stakeholders.
- Develop and maintain automated provisioning, configuration, testing, monitoring, and recovery capabilities that improve system resiliency, redundancy, security, and operational efficiency.
- Support classified enclave and cross-domain solution configurations, VTC endpoint integration, and coordination with facility security officers (FSOs) to ensure endpoint compliance within SCIF and SAP environments.
- Systems-engineering lifecycle principles and requirements management.
- System decomposition, integration, interfaces, dependencies, and traceability.
- Compute, operating system, storage, virtualization, container, and cloud fundamentals.
- Identity, authentication, authorization, encryption, and security-control integration.
- Networking and distributed-systems fundamentals.
- Reliability, availability, maintainability, resilience, backup, and recovery principles.
- Configuration, change, release, incident, and problem management.
- Verification, validation, test planning, and acceptance criteria.
- Automation, scripting, configuration management, and infrastructure-as-code concepts.
- Performance analysis, capacity planning, and technical risk management.
- Health, dental, vision insurance.
- Generous paid vacation and holiday leave.
- Flexible Spending Account (medical and dependent).
- 401(k) with employer match.
- Life insurance.
- Short-term and long-term disability.
- Tuition assistance and professional development opportunities.
Candidates must…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).