System Engineer 3-BP-287

Onyx Point•Hanover, MD

About The Position

The System Engineer will deploy, configure, and maintain Tenable Nessus Security Center and vulnerability scanners; automate Linux administrative and operational tasks using Ansible; and develop and maintain scripts to streamline system administration, security, and operational activities. The role also maintains SOPs, technical documentation, and system configuration records; hardens Windows and Linux operating systems in accordance with applicable security policies, STIGs, and SELinux requirements; and manages patch-management infrastructure and security content across enterprise systems. The position generates and analyzes security and vulnerability reports, remediates vulnerabilities, deploys and manages ePO security policies and endpoint configurations, applies Windows security updates, and administers and troubleshoots Active Directory, Group Policy Objects, DNS, DHCP, and SSL/TLS. Applicants must hold an active TS/SCI with Full Scope Polygraph security clearance and be U.S. citizens. The role requires at least 20 years of Systems Engineering experience on programs and contracts of similar scope, type, and complexity, along with demonstrated experience planning and leading Systems Engineering efforts. A bachelor's degree in a specified engineering, computing, information systems, or related professional engineering discipline is required; five additional years of Systems Engineering experience may be substituted for the degree. Salary range: $78,000–$250,000 per year, with the exact salary determined by work location, role, skills, and expertise.

Requirements

Active TS/SCI with Full Scope Polygraph security clearance; U.S. citizenship is required.
At least 20 years of Systems Engineering experience on programs and contracts of similar scope, type, and complexity.
Demonstrated experience planning and leading Systems Engineering efforts.
Bachelor's degree in Systems Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or a related professional engineering discipline from an accredited college or university; five additional years of Systems Engineering experience may be substituted for the degree.
Experience with BigFix is required.
Experience with RHEL 8/9 and Windows Server 2022/2025, Active Directory, GPO, DNS, DHCP, and SSL/TLS.
Familiarity with Tenable Nessus Security Center and Nessus scanners, Ansible playbooks, PowerShell, Bash, Python, BigFix Action Script and BigFix Relevance language, WSUS, BigFix, Nessus, and McAfee ePO.

Responsibilities

Deploy, configure, and maintain Tenable Nessus Security Center and vulnerability scanners.
Implement Ansible in Linux environments to automate administrative and operational tasks using playbooks.
Develop, implement, and maintain automation scripts for recurring system administration, security, and operational activities.
Update, maintain, and develop Standard Operating Procedures, technical documentation, and system configuration records.
Harden Windows and Linux operating systems in accordance with applicable security policies, STIGs, and SELinux requirements.
Maintain patch-management infrastructure, repositories, and security content, including WSUS, YUM repositories, BigFix libraries, McAfee ePO content, and Red Hat Satellite servers.
Generate security and vulnerability reports, analyze findings, and remediate vulnerabilities throughout the enterprise environment.
Deploy and manage ePO security policies and endpoint security configurations.
Apply Windows security updates using WSUS, BigFix, or other approved enterprise patch-management solutions.
Administer and troubleshoot Active Directory, Group Policy Objects, DNS, DHCP, and SSL/TLS.
Plan and lead Systems Engineering efforts.