Secure Computing Engineer (Level 3, 4) - HAC - Colorado Springs, CO - Open Rank

site-logo•Colorado Springs, CO

11h•Onsite

About The Position

The Georgia Tech Research Institute (GTRI) is seeking a Secure Computing Engineer to architect, design, implement, and maintain classified computer systems/networks and cyber security solutions for classified networks, including government enclaves. This role involves identifying and defining new cybersecurity objectives and controls, developing automated security validation toolsets, and conducting system, network, or software risk assessments. The engineer will perform vulnerability analysis of open-source software, integrate new architectural features, create cybersecurity architectural artifacts, and provide architectural analysis of cybersecurity features. Responsibilities also include leveraging advanced forensic tools for incident response, providing engineering recommendations, and resolving integration and testing issues. The position serves in a consultative role, defining cybersecurity controls, responding to alerts, and interacting with internal and external stakeholders. Key duties include ensuring cybersecurity needs are met for operations, defining security requirements, performing risk assessments, analyzing and designing information systems, managing certification and accreditation, hardening systems, configuring security boundary devices, conducting vulnerability scanning, incident response, disaster recovery, and supporting security policy development. The role also involves engineering, implementing, and maintaining IT infrastructure and cybersecurity controls, including virtual infrastructure, servers, workstations, storage, operating systems, and networking. Maintaining backups, managing disaster recovery and business continuity plans, and performing routine maintenance, upgrades, and deployment of new classified information systems are core functions.

Requirements

Experience with deploying and administering software applications.
Experience with Active Directory management, Group Policy Management, and Windows Server Update Services.
Experience managing, administering, and updating systems under the Risk Management Framework.
Experience with the implementation of system hardening techniques, including Security Technical Implementation Guidelines.
Candidate must be able to obtain and maintain DoD Directive 8570.1 IAT Level II compliance within 6 months of hire.
Candidate must be able to obtain Top Secret, SCI and SAP access.
5 years of related experience with a Bachelor’s degree in Information Technology, Cybersecurity, or related field.
3 years of related experience with a Masters’ degree in Information Technology, Cybersecurity, or related field.
0 years of related experience with a Ph.D. in Information Technology, Cybersecurity, or related field.
Candidates for this position must be U.S. Citizens.
Candidates must be able to obtain and maintain an active security clearance.

Nice To Haves

Active Top Secret Clearance.
Knowledge of Active Directory management, PowerShell scripting, Group Policy Management, and Windows Server Update Services.
Knowledge of Windows 11 & Windows Server management, Red Hat Enterprise Linux, Cisco IOS management.
Knowledge of the Risk Management Framework.
Knowledge of system hardening techniques, including Security Technical Implementation Guidelines.

Responsibilities

System Architecture design (compute, hardware/virtual, OS, storage, networking, security).
Translate researcher IT needs into robust and scalable IT Solutions/Infrastructure.
Contributor to the development of Continuous Integration and Continuous Development (CICD) processes using DevOps and DevSecOps principles.
Cross Domain Data Exchange and Systems Integration
Implementer of Infrastructure as Code.
Virtual machine management.
Validates security control configuration on systems, ensure all systems are configured to necessary controls, such as STIGS, CMMC, and other similar requirements.
Actively collaborates with customers and external teams, derives tasks from detailed requirements.
Provides tasking to other team members, based off of derived tasks.
Provides software and merge request code reviews.
Acts as the primary gatekeeper for infrastructure as code merges.
Ensures software adheres to coding standards and practices.
Support the creation, execution, and ongoing enhancement of organizational policies, standards, and procedures while maintaining system compliance and audit preparedness.
Establish, assess, and oversee security and technical specifications for projects and operational systems across Agile and traditional delivery frameworks, ensuring requirement traceability, stakeholder consensus, and robust change management.
Deliver expert cybersecurity guidance to stakeholders through requirement interpretation, contextual analysis of systems and operations, and provision of actionable, risk-informed recommendations that enable secure solutions.
Create project plans and resource estimates, execute assigned tasks, monitor project progress, generate status reports, and develop risk identification and mitigation strategies.
Maintain adherence to National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) control requirements.
Establish security protocols for development and testing phases, including implementation of security measures across network devices, databases, operating systems, and hardware/software components.
Converts strategic goals into actionable integration roadmaps, facilitating effective coordination among engineering teams, operations, and external collaborators.
Orchestrates multi-disciplinary initiatives to integrate project elements, ensuring conformance with technical specifications, timelines, and stakeholder expectations.