Secure Enclave System Engineering Lead

General Dynamics Information Technology • McLean, VA

6d • $164,382 - $210,450 • Onsite

About The Position

Advance your career while impacting our national security in cyber as a Cybersecurity Engineer Sr Principal at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government. As a Cybersecurity Engineer Sr Principal, the work you’ll do at GDIT will be impactful to the mission of our customer’s classified commercial cloud environment. You will play a crucial role in engineering and operating security controls for a classified secure workstation enclave, ensuring continuous monitoring, and compliance for mission-critical systems.

Requirements

• Bachelor of Arts/Bachelor of Science
• 10+ years of related experience
• Hands-on experience with Red Hat operating system and other Linux distributions
• Hands-on engineering experience administering and maintaining security operations using Splunk (SIEM), Tenable (vulnerability management), and Trellix (endpoint security)
• Hands-on experience with Teramind for insider threat monitoring
• Understanding of Microsoft Active Directory and implementing controls via Group Policy
• Knowledge of the complete NIST SP 800 series (especially 800-37, 800-53, 800-30) and risk management principles
• Active Top Secret security clearance
• Onsite - McLean, VA
• Must be DoD 8140 / 8570.01-M compliant
• US Citizenship Required

Nice To Haves

• Active Directory (AD)
• Redhat Linux Server
• Splunk Administration
• Tenable Security Center

Responsibilities

• Support and lead configuration, hardening, and updates of Linux operating systems, directly contributing to the secure operation of the enclave.
• Collaborate with enclave engineers, system administrators, and vendors to administer and maintain core security applications (SIEM, vulnerability scanning, endpoint protection, insider threat tooling) that safeguard the environment.
• Drive continuous monitoring and incident response activities by validating telemetry, triaging alerts, investigating incidents, and supporting RMF-aligned vulnerability management, endpoint security, and auditing.
• Utilize Red Hat/Linux, Splunk, Tenable, Trellix, Teramind, and Microsoft Active Directory/Group Policy to implement and validate security controls, maintain visibility, and provide actionable insights into the enclave’s security posture.
• Configure, harden, and update Linux operating systems within the secure enclave.
• Administer and monitor core security tools (Splunk SIEM, Tenable, Trellix, Teramind), ensuring telemetry, policies, and integrations function as intended.
• Triage and investigate security alerts and incidents in alignment with the Incident Response Plan.
• Oversee vulnerability and STIG scanning (host inventory, scan policies, and results) and coordinate remediation with the engineering team.
• Ensure complete endpoint visibility and policy enforcement across hosts and insider threat tooling.
• Support RMF Continuous Monitoring activities, including vulnerability management, endpoint security, auditing, and security alert monitoring.
• Contribute to security documentation, control implementation statements, assessment artifacts, and POA&M mitigation activities.

Benefits

• 401K with company match
• variety of medical plan options
• dental plan options
• vision plan
• full flex work weeks
• variety of paid time off plans, including vacation, sick and personal time, holidays
• paid parental, military, bereavement and jury duty leave
• short and long-term disability benefits
• life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior