Information Systems Security Engineer II

Honeywell Aerospace•Minneapolis, MN

22h•Onsite

About The Position

As an Information Systems Security Engineer (Cyber Sec Archt / Engr II) at Honeywell Aerospace, you will support DoD Collateral programs through onsite system administration, IT infrastructure support, and end-user support. You will help ensure compliance with the Defense Counterintelligence and Security Agency Assessment and Authorization Guide (DAAG) and NIST SP 800-53 while collaborating with Information System Security Managers (ISSM), Information System Security Officers (ISSO), and Facility Security Officers (FSO). This mission-critical role calls for technical expertise, attention to detail, and a commitment to protecting classified information. The position reports to the Cyber Security Manager and is based fully onsite in Minneapolis, Minnesota. Candidates must hold a Secret security clearance and meet the specified technical, certification, experience, and education requirements. Due to U.S. export-control requirements, candidates must qualify as a U.S. person. The employer is not sponsoring work visas, and applicants must be authorized to work in the United States on a full-time basis. The annual base salary range is $116,000–$144,500. Honeywell Aerospace says it considers factors such as responsibilities, experience, education, training, skills, and market and business considerations when making an offer. The role includes a comprehensive benefits package.

Requirements

Secret security clearance.
DoD 8140 IAT Level 2 minimum-compliant certification.
At least 3 years of system administration experience.
At least 2 years of cloud administration experience; Azure is preferred.
Experience with network administration, security tools such as ACAS, STIGs, Splunk, and SCC, and system hardening.
Proficiency configuring and managing secure Windows environments.
Proficiency administering cloud environments.
Associate’s degree in information technology, computer science, or a related field.
Must be a U.S. person as defined for U.S. export-control purposes: a U.S. citizen, U.S. permanent resident, or a person with protected status in the U.S. under asylum or refugee status.
Must be currently authorized to work in the United States on a full-time basis; work visa sponsorship is not available.

Nice To Haves

Top Secret security clearance.
Microsoft Azure certification.
Prior work experience with DAAG and NIST SP 800-53 standards or in a defense contracting environment.
High-level Windows 10 and Windows 11 system administration experience.
High-level Windows Server 2016/22 administration experience.
Familiarity with virtualization, such as VMware.

Responsibilities

Design, deploy, and configure secure IT systems, networks, workstations, and cloud enclaves in accordance with DAAG and NIST SP 800-53 requirements.
Establish and maintain baseline configurations for hardware, software, and network components.
Implement and validate Risk Management Framework (RMF) security controls and system-hardening measures.
Provide Tier 1 and Tier 2 technical support to DoD personnel, troubleshooting hardware, software, cloud, and network issues.
Manage user accounts, permissions, and access controls in compliance with DoD security policies.
Create and deliver training or documentation to improve end-user efficiency and security awareness.
Work with ISSMs and ISSOs to integrate security into RMF processes and support Authorization to Operate (ATO) efforts.
Report and respond to security incidents or anomalies in coordination with the security team.
Perform routine system maintenance, including patch management, updates, and secure backups, following DAAG and NIST SP 800-53 guidelines.
Monitor system performance and security logs and proactively address issues to maintain operational integrity.
Maintain detailed documentation of configurations, processes, and standard operating procedures.
Ensure activities comply with DAAG, NIST SP 800-53, and DoD-specific directives.
Protect the confidentiality, integrity, and availability of classified and sensitive data.
Respond to evolving security requirements and support incident mitigation as needed.
Maintain information systems compliance.