Lead Engineer

Program Management Solutions LLC • Falls Church, VA

2d • $135,000 - $160,000 • Onsite

About The Position

The Lead Engineer is the senior technical authority for the MEDXS/MEDEX enterprise, owning the end-to-end system architecture and serving as the final technical arbiter for design, integration, and cybersecurity engineering decisions. This position translates Government mission requirements into executable technical baselines, leads the engineering team in delivering sustainment and modernization changes, and guarantees that every architectural change preserves the system's Authorization to Operate and its ability to move clinical and executive health data reliably between CONUS enterprise nodes and forward-deployed OCONUS theater nodes. The Lead Engineer is expected to hold expert-level, hands-on knowledge of MEDXS/MEDEX system architecture and to personally lead resolution of the most complex technical failures. Primary duty station is the Defense Health Headquarters (DHHQ), Falls Church, Virginia. On-site presence is required; telework is by Government approval only and is not guaranteed.

Requirements

• Bachelor's Degree in Computer Science, Electrical Engineering, or Information Technology from an accredited institution.
• Minimum eight (8) years of systems engineering experience.
• IASAE Level II certification in accordance with DoD 8570.01-M (for example, CISSP or CASP+), current and in good standing.
• Expert-level knowledge of MEDXS/MEDEX system architecture.
• Ability to obtain and maintain the required security clearance and IT-I designation.
• Enterprise architecture across Windows Server and Red Hat Enterprise Linux, VMware vSphere or Hyper-V, SAN/NAS storage, and load-balanced multi-tier application design.
• Network and transport engineering sufficient to design across DISA transport, MPLS/SD-WAN, VPN, and NIPRNet boundary devices, including firewall and ACL design.
• Security engineering: PKI and CAC/PIV authentication, Active Directory and LDAP integration, TLS and data-at-rest encryption, HBSS/ESS, ACAS, SIEM integration, and STIG/SCAP tooling.
• Automation and configuration management: PowerShell, Bash, Python, Ansible, and Git-based version control of configuration baselines.
• Systems engineering process rigor: requirements traceability, interface control, verification and validation, and configuration management per recognized standards.

Nice To Haves

• Prior hands-on engineering experience with MEDXS, MEDEX, or another Military Health System enterprise application.
• Experience serving as the technical lead of record on a DoD RMF authorization package through ATO award.
• Advanced virtualization, storage, and enterprise infrastructure credentials (VMware VCP/VCAP, Red Hat RHCE, Microsoft Azure or AWS architect-level).
• Experience engineering systems for austere, bandwidth-constrained, or disconnected theater environments.
• Master's Degree in Computer Science, Systems Engineering, Cybersecurity, or a related discipline.
• Experience with HL7, FHIR, or other health information exchange standards.

Responsibilities

• Serve as the authoritative technical lead for MEDXS/MEDEX system architecture, owning the as-built and to-be architecture baselines, interface control documentation, and system design specifications.
• Provide expert-level engineering analysis of the full MEDXS/MEDEX stack, including application tiers, data tiers, integration and messaging interfaces, authentication and authorization services, and the transport network connecting enterprise and theater nodes.
• Lead engineering design reviews, technical interchange meetings, and Preliminary and Critical Design Reviews; develop and defend trade studies and alternatives analyses with quantified cost, risk, schedule, and performance impacts.
• Direct, mentor, and technically supervise the Senior System Engineers, System Engineers, and System Administrators; allocate engineering tasks, set technical standards, and review work products for quality and compliance.
• Perform Information Assurance System Architect and Engineer (IASAE) Level II duties: design security architecture and controls into the system, define the security requirements traceability, and validate that implemented controls satisfy the assigned RMF control baseline.
• Own the cybersecurity engineering posture: lead STIG application and tailoring, vulnerability scan analysis (ACAS/Nessus), POA&M development and burn-down, IAVA/IAVB compliance, and remediation of findings within Government-directed timelines.
• Serve as the principal technical contributor to RMF artifacts and eMASS packages supporting Authorization to Operate, Interim Authorization to Test, and reauthorization actions, including System Security Plans, security assessment procedures, and control implementation statements.
• Lead the engineering of OCONUS node deployments: site surveys, bandwidth and latency analysis, hardware and virtualization sizing, disconnected and intermittent-bandwidth operating modes, data replication strategy, and cutover and rollback planning.
• Design and validate high availability, backup, disaster recovery, and continuity of operations architecture; define and test recovery time and recovery point objectives against mission requirements.
• Chair or serve as the senior technical voting member on the Configuration Control Board and Change Advisory Board; perform technical impact assessment on every proposed change and approve or reject implementation plans and rollback procedures.
• Lead root cause analysis for Severity 1 and Severity 2 incidents and recurring problem records, producing formal RCA documentation with permanent corrective action and preventive engineering changes.
• Establish and enforce engineering standards: build and hardening baselines, golden images, infrastructure-as-code patterns, patch and release engineering processes, naming and addressing standards, and documentation requirements.
• Direct capacity and performance engineering: monitor utilization trends, model growth, and produce technology refresh and capacity expansion recommendations for Government planning and budgeting.
• Evaluate emerging technologies and provide the Government with written technical recommendations on modernization opportunities, product selection, and system lifecycle decisions.
• Author and maintain the authoritative technical documentation library, including system design documents, network and data flow diagrams, installation and configuration guides, standard operating procedures, and disaster recovery playbooks.
• Provide senior technical support to the Project Manager for technical volumes, technical questions, engineering change proposals, and rough order of magnitude estimates.

Benefits

• On-call and after-hours support required for scheduled maintenance windows, system outages, and OCONUS time-zone coverage.
• Occasional lifting of equipment up to 40 pounds, work in raised-floor data center spaces, and extended periods at a workstation are expected.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior