Sr Principal Cyber Systems Engineer #2018-2

Northrop Grumman•Huntsville, AL

10d•$149,300 - $223,900•Onsite

About The Position

Northrop Grumman Defense Systems is seeking a Senior Principal Cyber Systems Engineer - 2018-2. This position is located in Huntsville, AL and supports the Sentinel program. At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Requirements

Bachelor's degree in Science with 8 years of experience; or Master's degree with 6 years of experience; PhD with 4 years of experience or 4 additional year of experience in lieu of degree.
Must have an active U.S. Government DoD Secret security clearance at time of application, current and within scope, with an ability to obtain and maintain Special Access Program (SAP) approval within a reasonable period of time, as determined by the company to meet its business need.
Current Security + or equivalent certification or greater or ability to obtain, within 6 months or less of hire, DoD 8570 / AFMAN 17-1303 qualification at IASAE 2 level.
2+ years of experience in directory services protocols (e.g. LDAP, Kerberos, SAML, OAuth) with experience in integration and implementation
2+ years of experience managing headless systems with PowerShell and Bash
2+ years of experience implementing DISA STIGs on various Operating Systems and platforms.
Understanding basic networking principles, including TCP/IP, subnets, routing, and VLAN configurations
Proficiency in on-prem virtualization and cloud orchestration platforms (e.g., VMware vSphere, OpenStack, Microsoft Hyper-V, Nutanix)
Extensive knowledge of Linux internals (e.g. PAM, systemd, SELinux) and Windows internals (e.g. SAM, registry, secpol).
Familiarity with DNS concepts and basic networking concepts.

Nice To Haves

Active U.S. Government DoD Top Secret security clearance.
Experience automating OS deployments (e.g. kickstart/answer files, MDT, ansible)
Experience with large scale Active Directory deployments (e.g. DFS, sites and services, FSMO)
Competency in implementing access controls, identity management, and on-prem security best practices
Experience with implementing AD FS claims
Experience with certificate management implementation and principles.
Familiarity with scripting Windows Group Policy Objects (GPOs)
Experience scaling hyperconverged solutions
Familiarity with server hardware and rack management
Knowledge of virtualization, clustering, and high-availability solutions

Responsibilities

Administer systems based on Linux and Windows operating systems
Automate system deployment, operation and maintenance using Infrastructure as Code (IaC) and Configuration Management (CM) tooling
Work with microservices and distributed application architecture, such as containers, Kubernetes, and/or serverless technology
Implement clean and maintainable infrastructure-as-code that adheres to industry best practices
Automate cloud native technologies in air-gapped environments, deploy applications, and provision critical infrastructure
Design and implement security measures, such as firewalls, intrusion detection and prevention systems, and encryption
Implement and maintain security policies and procedures to comply with industry standards and regulations
Provide technical guidance and training to other team members and stakeholders