Systems Engineer

Govcio LLC•Hampton, VA

1d•Onsite

About The Position

GovCIO is currently hiring a Systems Engineer for our Zero Trust integration effort with the US Air Force. The Systems Engineer’s role is designing, managing, and optimizing complex enterprise systems ensuring their efficiency and reliability across the intelligence community in support of the United States Air Force Headquarters Air Force A2 (HAF/A2). This position will be located at Langley AFB, Hampton, VA and will be a full-time on-site position.

Requirements

High School with 9+ years (or commensurate experience)
Clearance Required: TS/SCI
DoD 8140 Level II (Sec+CE, SSCP, CND, CCNA Security, etc)
Requirements engineering (writing, analyzing, validating)
Systems architecture and design
Knowledge of systems engineering principles
Requirements & architecture competency

Nice To Haves

Experience with DoD NIPR, SIPR and JWICS Networks
Experience with Zero Trust Fundamentals
Experience with the Air Force Intelligence Community
System modeling and simulation
Lifecycle management (V-model, waterfall, agile, MBSE)
System integration & testing

Responsibilities

Design and implement Zero Trust architectures across enterprise environments (on-prem, cloud, hybrid).
Develop identity-centric, least-privilege access models leveraging Zero Trust principles.
Create detailed technical designs, diagrams, and system integration plans for authentication, authorization, and network segmentation.
Evaluate and recommend Zero Trust technologies (e.g., ZTNA, SDP, IAM, PAM, microsegmentation, SASE).
Engineer and maintain solutions for multi-factor authentication (MFA), single sign-on (SSO), and federated identity services.
Implement continuous authentication and risk-based access controls.
Integrate identity services with applications, APIs, and endpoints.
Ensure proper enforcement of least privilege, including policy design and periodic access reviews.
Implement microsegmentation (host-based or network-based) for sensitive workloads.
Configure and maintain software-defined perimeter (SDP) or Zero Trust Network Access (ZTNA) solutions.
Integrate systems with SIEM, SOAR, XDR, and behavior analytics tools to provide continuous monitoring.
Maintain high-availability and performance of Zero Trust platforms.
Implement robust logging, auditing, and telemetry pipelines to support decision engines.