Systems Engineer

LufCo•Annapolis Junction, MD

7d•Onsite

About The Position

As a Systems Engineer you serve as a core technical authority bridging high-level cryptographic mission requirements with secure engineering execution. Working within cryptographic development and production environments, you will design, integrate, test, and sustain modernized IT infrastructure and software platforms dedicated to an exclusive customer mission. You will apply system-of-systems engineering, DevSecOps principles, and Scaled Agile Framework (SAFe) methodologies to transition legacy client-server architectures into modular, microservices-based containerized environments.

Requirements

Active TS/SCI with Polygraph clearance.
Bachelors degree in a Technical or related discipline is preferred. 4 years of additional experience may be substituted for a bachelors degree.
SE1: 5+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.
SE2: 10+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.
SE3: 15+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.
DoD 8570.01-M / DoD 8140 Information Assurance Technical (IAT) Level II or III baseline certification (e.g., Security+ CE, CASP+ CE, or CISSP) preferred
Certified Kubernetes Administrator (CKA), SAFe Agilist, or equivalent advanced certifications are strongly preferred
Advanced proficiency in cryptographic key lifecycle management, FIPS 140-2/3 standards, PKI, Key Management Infrastructure (KMI) concepts, zeroization workflows, and secure boundary enforcement.
Proven hands-on experience in GitLab CI/CD pipeline automation, containerization (Docker, Podman), container orchestration (Kubernetes, OpenShift, Tanzu), and active participation in SAFe ceremonies.
Experience with VMware vSphere/Horizon platforms, Infrastructure as Code (Ansible, Packer), system hardening (DISA STIGs, CIS Benchmarks), and continuous observability stacks (ELK, Grafana).

Responsibilities

Engineer, integrate, and sustain government-owned IT infrastructure and platforms in compliance with Risk Management Framework (RMF) guidelines.
Lead system architecture refactoring from legacy client-server systems into modular microservices executing within Kubernetes (TKG/OpenShift) enclaves.
Interface system platforms with high-assurance cryptographic equipment, Hardware Security Modules (HSMs), key management devices, Public Key Infrastructure (PKI), and external randomizers.
Formulate and manage System Security Plans (SSPs), Data Flow Diagrams, COOP plans, and security controls to maintain continuous Authority to Operate (ATO).
Implement DevSecOps CI/CD pipeline automation (GitLab CI, Docker, Kubernetes) with embedded security gates, static analysis, and zero-defect validation protocols.
Enforce Infrastructure as Code (IaC) configuration management and automated drift remediation using capabilities such as Ansible and Packer.
Participate in SAFe Program Increment (PI) planning, sprint execution, and cross-functional Agile Release Trains (ART).