Systems Engineer

Govcio•Hampton, VA

5h•Onsite

About The Position

GovCIO is currently hiring a Systems Engineer for our Zero Trust integration effort with the US Air Force. This position will be located in Hampton, VA and will be a full-time on-site position. The Systems Engineer’s role is designing, managing, and optimizing complex enterprise systems ensuring their efficiency and reliability across the intelligence community (IC) in support of the United States Air Force Headquarters Air Combat Command (HQ ACC/A2). The Systems Engineer will need to have experience with ICAM (Identity, Credential, and Access Management) that involves securing digital access by managing user identities, credentials (passwords, biometrics, PIV cards), and permissions, focusing on provisioning/deprovisioning, policy enforcement, Zero Trust principles, and ensuring compliance for critical systems. Duties include managing identity lifecycle , access requests , MFA , RBAC , auditing access , and troubleshooting security issues.

Requirements

High School with 10+ years (or commensurate experience)
Clearance Required: TS/SCI
DoD 8140 Level II (Sec+CE, SSCP, CND, CCNA Security, etc)
Requirements engineering (writing, analyzing, validating)
Systems architecture and design
Interface definition and control
System modeling and simulation
System integration & testing
Lifecycle management (V-model, waterfall, agile, MBSE)
Knowledge of systems engineering principles
Requirements & architecture competency
Integration & test experience
Policy and compliance
System integration
Stakeholder collaboration

Nice To Haves

Experience with the Air Force Intelligence Community
Experience with DoD NIPR, SIPR and JWICS Networks
Experience with Zero Trust Fundamentals
Understanding of Identity Lifecyle Management, provisioning and deprovisioning, credential management & access control
Monitor and incident response

Responsibilities

Design and implement Zero Trust architectures across enterprise environments (on-prem, cloud, hybrid).
Develop identity-centric, least-privilege access models leveraging Zero Trust principles.
Create detailed technical designs, diagrams, and system integration plans for authentication, authorization, and network segmentation.
Evaluate and recommend Zero Trust technologies (e.g., ZTNA, SDP, IAM, PAM, micro segmentation, SASE).
Engineer and maintain solutions for multi-factor authentication (MFA), single sign-on (SSO), and federated identity services.
Implement continuous authentication and risk-based access controls.
Integrate identity services with applications, APIs, and endpoints.
Ensure proper enforcement of least privilege, including policy design and periodic access reviews.
Implement micro segmentation (host-based or network-based) for sensitive workloads.
Configure and maintain software-defined perimeter (SDP) or Zero Trust Network Access (ZTNA) solutions.
Integrate systems with SIEM, SOAR, XDR, and behavior analytics tools to provide continuous monitoring.
Maintain high-availability and performance of Zero Trust platforms.
Implement robust logging, auditing, and telemetry pipelines to support decision engines