Sr. Systems Security Engineer (Onsite - Largo, FL) TS/SCI Clearance required

RTX•Largo, FL

2d•$86,800 - $165,200•Onsite

About The Position

The Starburst Engineering Department is seeking a Sr. Systems Security Engineer to contribute to the development and deployment of System Security solutions on the Starburst program. This candidate will be integrated into a multi-discipline team environment, with representation from System Engineers, Software Engineers, Cybersecurity, Digital Technology, and Field Services. Primary responsibilities are the implementation and sustainment of requirements for deployed products and services that are in operational and sustainment states. As a Systems Security Engineer, you will make a significant impact to the program’s execution, working with the Project Engineers (Cost Account Managers and Integrated Product Team Leads) and Domain Leads to execute the development and deployment of program products and services. This role will be worked onsite in Largo, FL and requires an active and transferrable TS/SCI clearance. Relocation assistance is available.

Requirements

Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 5 years prior relevant experience or an Advanced Degree in a related field and minimum 3 years of experience
Active and transferable U.S. government issued TS/SCI security clearance is required prior to start date
Experience with enterprise configuration and patch management using automated tools such as Microsoft End-Point Configuration Manager (MECM) or Windows Systems Update Service (WSUS)
Active DoD 8570 IAT Level II certification e.g. Security+ and/or CISSP, with the ability to maintain

Nice To Haves

Systems Administration using Linux and Windows desktop and server operating systems (Windows 11/Server 2022/2025/RHEL)
Experience with traditional, and current on-prem enterprise IT systems and technologies and its impacts to the security of: Identification, Credential and Access Management (ICAM) for those systems. Secure enterprise messaging Enterprise Logging Ingest, Cyber Situational Awareness and protection, Endpoint Detection and Response
Proficient knowledge of Enterprise Identity Management applications and design including LDAP (e.g. Active Directory) and PKI
Experience with DISA Security Technical Implementation Guides (STIGs) and Compliance scans using ACAS or SCAP Compliance Checker (SCC)
Experience with various computing hardware and software platforms, including servers, workstations, supporting various COTS software applications, and custom software applications
Experience maintaining Window servers and troubleshooting software applications
Understanding of traditional, and current on-prem enterprise IT systems and technologies and its impacts to the security of: Identification, Credential and Access Management (ICAM) for those systems. secure enterprise messaging Enterprise Logging Ingest, Cyber Situational Awareness and protection, Endpoint Detection and Response
Experience with enterprise firewalls, including knowledge of firewall policies/rulesets
Understanding of basic network engineering fundamentals, including: OSI layers, IP addressing, sub-netting, TCP/IP stack, VLANs, well-known ports and protocols, etc.
Knowledge and experience leading or contributing to integration efforts involving either Cybersecurity, Risk Management Framework, or Information Assurance
Knowledge of how to scan hardware and software for compliance and vulnerabilities utilizing industry tools such as Assured Compliance Assessment System (ACAS)
Experience configuring and troubleshooting File Classification, labeling and associated policy tools (e.g. NextLabs, Boldon James), SIEM tools (e.g. Splunk), network monitoring tools (e.g. SolarWinds)
Experience working with command-line interfaces and scripting (PowerShell, Bash, etc.)
Experience with common VMware products (vSphere, vCenter, ESXi) and overall virtualization implementations
Experience in maintaining and administering storage appliances (e.g. Pure Storage, Segate)
Knowledge of Zero Trust principles
Experience with Agile project methodologies, and Jira workflows.
Experience in maintaining and administering storage appliances (e.g. Pure Storage, Segate)
Agile Development Techniques such as Scrum or Kanban, using Atlassian Tool Suite (Jira, Confluence, Mattermost)
Knowledge in DevSecOps, Digital Technology or Information Systems, specifically IT networks and enterprise applications
Understanding of configuring and troubleshooting anti-virus applications and DLP, such as Trellix
Sound foundation in Data Management and Configuration Management principles, process, and concepts

Responsibilities

Work within the Security Engineering domain and as a part of the larger enterprise engineering effort, you will operate within a custom, air-gapped, Department of Defense IT network on a daily basis to perform advanced support and direct deployment of new capabilities at a sustained rate
Demonstrate your ability to create and present materials to convey concepts and ideas to a wide range of audiences
Work primarily onsite in a closed area environment with occasionally opportunity to work offsite
Demonstrate your ability to create, follow and update to system documentation, schematics and operational guides and procedures
Demonstrate your ability to interface with other teams to help define, determine and implement cyber risk posture, cyber risk mitigation and information assurance throughout the enterprise IT service portfolio on a sustained level

Benefits

Medical, dental, and vision insurance
Three weeks of vacation for newly hired employees
Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
Tuition reimbursement program
Student Loan Repayment Program
Life insurance and disability coverage
Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
Birth, adoption, parental leave benefits
Carrot Health, fertility, and family planning
Adoption Assistance
Autism Benefit
Employee Assistance Plan, including up to 10 free counseling sessions
Healthy You Incentives, wellness rewards program
Doctor on Demand, virtual doctor visits
Bright Horizons, child and elder care services
Teladoc Medical Experts, second opinion program