Sr Principal Cyber Systems Engineer-AHT

Northrop Grumman•Huntsville, AL

1d•$149,300 - $223,900•Onsite

About The Position

Northrop Grumman Defense Systems is hiring a Senior Principal Cyber Systems Engineer in Huntsville, AL to support the Advanced Technology Center's critical Windows domain infrastructure and virtualized enterprise environments in a fast-paced, classified environment. The new team member will design, implement, and secure enterprise Windows domain infrastructure, virtualization platforms, and cyber defense systems that support classified national defense programs. They will lead the administration and strategic enhancement of Windows Server environments including Active Directory, DNS, Group Policy, and domain services across multiple security classification levels. The role involves architecting, deploying, and maintaining VMware vSphere and Horizon VDI environments to support mission-critical operations and secure remote access solutions. The engineer will apply cybersecurity frameworks and compliance standards (DISA STIG, CIS Benchmarks) to harden systems and maintain security posture across classified networks. Additionally, they will provide technical leadership and mentorship to systems administration teams, driving best practices in virtualization, automation, and infrastructure lifecycle management. Collaboration with cross-functional teams including network engineers, software developers, and cybersecurity professionals is essential to deliver integrated infrastructure solutions. Support for high-visibility demonstrations and mission-critical operations through infrastructure readiness, troubleshooting, and rapid problem resolution is also a key aspect of the role. Ensuring operational excellence through proactive monitoring, patch management, and continuous improvement of enterprise systems is expected.

Requirements

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related STEM field plus 8 years of relevant experience; OR Master's degree plus 6 years of relevant experience; OR Associate's degree plus 12 years of relevant experience; OR 15+ years of equivalent hands-on technical experience in lieu of degree
5+ years of hands-on Windows Server and Active Directory administration including DNS, GPO, domain controller management, and troubleshooting in enterprise environments
3+ years of VMware vSphere and/or Horizon administration including ESXi host management, vCenter operations, VM lifecycle, and VDI pool management
Experience with Linux/UNIX system administration (RHEL, CentOS, or similar) including user management, permissions, services, and bash scripting
DoD 8570 IAT Level II or IAM Level II certification (Security+, CySA+, CASP+/SecurityX, CISSP, or equivalent)
Demonstrated experience applying DISA STIGs and security hardening to Windows Server, Linux systems, and virtualized infrastructure
Proficiency in scripting and automation using PowerShell, Bash, and/or Python for administrative tasks
Experience with enterprise storage and backup solutions (NetApp, SAN, or equivalent)
Experience with network fundamentals including TCP/IP, DNS, DHCP, VLANs, and basic switching/routing for troubleshooting
Proven ability to work effectively in team environments and provide technical mentorship to junior staff
US Citizenship is required
A current/active U.S. Government Secret clearance with ability to get a TS

Nice To Haves

DoD 8570 IAM Level II or IAT Level III certification (CASP+/SecurityX, CISSP, CISM, or equivalent)
CompTIA Linux+ or RHCE (Red Hat Certified Engineer) certification
5+ years of team lead or technical leadership experience managing systems administration teams or leading complex infrastructure projects
Extensive experience with VMware Horizon VDI environments including deployment, optimization, certificate management, and troubleshooting
Advanced Windows Server administration including multi-site AD replication, federation services, and PKI/certificate management
Experience with Citrix XenApp/XenDesktop or NetScaler environments
Proficiency with DevOps tools and practices including GitLab, CI/CD pipelines, infrastructure-as-code, and configuration management
Experience with monitoring and logging solutions (Grafana, Splunk, ELK stack, or equivalent)
Hands-on experience with containerization technologies (Docker, Kubernetes) and modern application deployment
Experience designing and implementing secure network architectures including VPNs, firewalls (Cisco, Juniper, Palo Alto), and network segmentation
Demonstrated experience in classified/high-side environments supporting SAP or SCI programs
Experience with Agile methodologies and working in cross-functional DevSecOps teams
Familiarity with Atlassian suite (JIRA, Confluence) for documentation and project tracking
Secret clearance already adjudicated and active
Strong written and verbal communication skills with ability to brief technical content to leadership

Responsibilities

Lead Windows domain infrastructure design, implementation, and administration for classified environments
Manage VMware vSphere clusters, ESXi hosts, and Horizon VDI pools including upgrades, patching, and lifecycle management
Design and implement Group Policy Objects (GPOs) to enforce security controls and standardize configurations
Administer Active Directory services including DNS, DHCP, user/group management, and domain controller operations
Create, optimize, and maintain Windows and Linux virtual machine gold images for enterprise deployment
Develop and execute automation scripts (PowerShell, Bash, Python) to streamline administrative tasks and reduce human error
Apply DISA STIGs and CIS hardening guidelines to Windows Server, Linux, and virtualized infrastructure
Manage enterprise storage solutions (NetApp, SAN) integrated with virtualization platforms
Coordinate patch management cycles across Windows and Linux systems following established security protocols
Provide 24/7 on-call support for critical infrastructure and participate in incident response activities
Document system architectures, procedures, and configuration standards for enterprise environments
Interface with program leadership, architects, and stakeholders to align infrastructure with mission requirements