Systems Engineer

Govcio LLC•Washington, D.C., VA

10d•Onsite

About The Position

GovCIO is currently hiring a Systems Engineer for our Zero Trust integration effort with the US Air Force. This position will be located at Joint Base Anacostia-Bolling and will be a full-time on-site position supporting Headquarters Air Force A2.

Requirements

Clearance Required: TS/SCI
6-9 years’ experience performing requirements engineering (writing, analyzing, validating)
6-9 years’ experience performing systems architecture and design
6-9 years’ experience performing interface definition and control
6-9 years’ experience performing system modeling and simulation
6-9 years’ experience performing system integration & testing
6-9 years’ experience performing lifecycle management (V-model, waterfall, agile, MBSE)
Knowledge of systems engineering principles
Requirements & architecture competency
Integration & test experience
DoD 8140 Level II (Sec+CE, SSCP, CND, CCNA Security, etc)

Nice To Haves

Experience with the Air Force Intelligence Community
Experience with DoD NIPR, SIPR and JWICS Networks
Experience with Zero Trust Fundamentals

Responsibilities

Designing, managing, and optimizing complex enterprise systems ensuring their efficiency and reliability across the intelligence community in support of the United States Air Force A2 Intelligence Directorate.
Design and implement Zero Trust architectures across enterprise environments (on-prem, cloud, hybrid).
Develop identity-centric, least-privilege access models leveraging Zero Trust principles.
Create detailed technical designs, diagrams, and system integration plans for authentication, authorization, and network segmentation.
Evaluate and recommend Zero Trust technologies (e.g., ZTNA, SDP, IAM, PAM, micro segmentation, SASE).
Engineer and maintain solutions for multi-factor authentication (MFA), single sign-on (SSO), and federated identity services.
Implement continuous authentication and risk-based access controls.
Integrate identity services with applications, APIs, and endpoints.
Ensure proper enforcement of least privilege, including policy design and periodic access reviews.
Implement micro segmentation (host-based or network-based) for sensitive workloads.
Configure and maintain software-defined perimeter (SDP) or Zero Trust Network Access (ZTNA) solutions.
Integrate systems with SIEM, SOAR, XDR, and behavior analytics tools to provide continuous monitoring.
Maintain high-availability and performance of Zero Trust platforms.
Implement robust logging, auditing, and telemetry pipelines to support decision engines.