Senior Engineer II- Information Security Systems

Microchip Technology Inc.•Boulder, CO

11d•$70,304 - $205,000•Onsite

About The Position

Microchip’s Frequency and Timing Division is a world leader in precise time solutions and sets the world's standard for time. The division generates, distributes and applies precise time for the communications, aerospace/defense, IT infrastructure, and metrology industries. Microchip's customers, from communications service providers and network equipment manufacturers to governments and their suppliers worldwide, are able to build more reliable networks and systems by using the company's advanced timing technologies, atomic clocks, services, and solutions. Microchip products support today's precise timing standards, including GPS-based timing, IEEE 1588 (PTP), Network Time Protocol (NTP), and Synchronous Ethernet. Our Government Systems group in Boulder, CO is seeking an Senior Engineer II- Information Security Systems (ISSE) to provide technical support in the design, implementation, and sustainment of cybersecurity capabilities across complex enterprise and mission systems. The ISSE ensures compliance with governing standards and frameworks, including NIST Risk Management Framework (RMF), NIST SP 800-53, ICD 503, CNSSI 1253, and DISA STIGs. This role requires technical aptitude to troubleshoot Linux and Windows servers, end-user nodes, Cisco switches, and enterprise shared storage systems, while applying continuous monitoring practices to maintain compliance and strengthen mission assurance.

Requirements

Active Top Secret/SCI clearance w/ CI Poly.
US citizenship
Bachelor’s degree in Cybersecurity, Computer Science, or related discipline (or equivalent experience).
7+ years of cybersecurity engineering experience with demonstrated expertise in NIST RMF and related standards.
Proven ability to troubleshoot and support Linux/Windows servers and endpoints, Cisco network devices, and enterprise storage systems.
Hands-on experience with compliance and monitoring tools (Tenable/ACAS, Splunk/ELK, HBSS/ESS).

Responsibilities

Engineer and integrate security controls into system and network architectures, including virtualized platforms, shared storage, and mission networks.
Translate NIST and CNSS security controls into technical designs and secure implementations.
Provide advanced troubleshooting for: Linux and Windows servers (configuration, patching, service integrity).
Provide advanced troubleshooting for: Linux and Windows end-user workstations/nodes (endpoint compliance and hardening).
Provide advanced troubleshooting for: Cisco switches and network devices (VLANs, ACLs, port security, logging).
Provide advanced troubleshooting for: Shared drives and enterprise file systems (permissions, access auditing, data protection).
Collaborate with administrators and engineers to resolve technical issues while maintaining compliance.
Implement and sustain continuous monitoring for common and system-specific controls, including automated vulnerability scanning, patch compliance, and SIEM log analysis.
Correlate monitoring results across systems, assess control effectiveness, and recommend remediation strategies.
Conduct technical security assessments using Tenable, DISA STIGs, CSO Benchmarks, and related NIST guidelines.
Analyze results, prioritize risk, and lead remediation with system and network teams.