Own end-to-end delivery of secure command-and-control cybersecurity engineering for critical infrastructure systems within a Standard V-Model framework.
Responsibilities
- Translate customer cybersecurity needs into traceable system-level and component-level specifications using the Standard V-Model, in collaboration with Project Engineering Leads.
- Contribute to engineering cost estimates from project requirements and communicate requirements-related issues and risks to program leadership and customers.
- Design cybersecurity architectures for AIM SCS and COTS-based command-and-control solutions, including:
- Network segmentation, access control, encryption, secure communications
- Integration of physical security subsystems
- Ensure design decisions are traceable to applicable NEI 08-09 and CIS benchmark controls.
- Architect platform environments of 20–30 Windows servers and workstations within an Active Directory domain, including:
- Group Policy-based security controls
- Virtualized cluster layouts
- Storage systems
- Linux-based security appliances
- Network switches and firewalls
- Produce and maintain design documentation with full traceability to system requirements, including:
- Virtual and network design plans
- Network architecture diagrams
- Configuration specifications
- Cybersecurity control mapping matrices
- Stand up, configure, and deliver 20–30 servers and workstations in Active Directory environments.
- Perform server and network deployment across the product delivery lifecycle to prioritize deliverables, validate feature sets, and maintain schedule and budget alignment.
- Integrate COTS solutions using system hardening, vulnerability analysis, documentation, and patching.
- Diagnose and resolve integration issues using systematic analysis, creative problem-solving, and documented resolution paths.
- Maintain configuration management records throughout the build, documenting decisions, changes, and deviations for a complete audit trail.
- Verify product feature sets to confirm functional and cybersecurity capabilities meet acceptance criteria prior to formal test completion.
- Collaborate on development and execution of cybersecurity test procedures mapped through a Requirements Traceability Matrix (RTM), validating compliance at both component and system levels.
- Support Acceptance Testing, including vulnerability assessments and security scans, with dispositioning of findings.
- Support onsite deployment at customer sites: physical installation, network commissioning, Active Directory integration, and system configuration per site-specific cybersecurity commissioning procedures.
- Conduct Site Acceptance Testing (SAT) with customer security, IT/OT, and operations staff to resolve integration challenges in real time and communicate status, test results, and dispositions to stakeholders.
- Train facility personnel on system operation, cybersecurity maintenance, and configuration management practices; deliver turnover packages.
- Travel up to 25%.
- Drive continuous improvement by capturing lessons learned after each delivery and updating design standards, integration procedures, and test methodologies.
- Mentor junior engineers and serve as a technical point of contact for direct customer communications.
- Other duties as required.
Requirements
- Bachelor’s degree in Cybersecurity, Systems Engineering, Computer Science, Electrical Engineering, Information Technology, or related discipline.
- 5 to 7 years of hands-on experience.
- Strong verbal and written communication skills, including ability to produce formal engineering documentation and present technical content to multiple audiences.
- Knowledge of engineering methodologies.
- U.S. citizenship or permanent resident status required.
- Ability to obtain site access credentials at nuclear power plants and government facilities.
Technologies
- Standard V-Model
- NEI 08-09
- CIS benchmark controls
- AIM SCS
- COTS
- Windows servers, Windows workstations
- Active Directory, Group Policy
- Virtualized cluster layouts
- Linux-based security appliances
- Network switches, firewalls
- Requirements Traceability Matrix (RTM)
- NIST SP 800-82, NIST SP 800-53
- IEC 62443
- NRC 10 CFR 73.54
Preferred
- Experience in project-based work with requirements-driven deliverables.
- Networking protocols and small to mid-sized network design.
- Virtualized clusters.
- Direct experience delivering systems in nuclear power, defense, or other NRC/DOE/DOD-regulated environments, including familiarity with nuclear communications systems and terminology, and NRC 10 CFR 73.54 compliance processes.
- CISSP or equivalent certification; GICSP, Security+, or CASP+.
- Familiarity with NIST SP 800-82, NIST SP 800-53, and IEC 62443 for industrial and critical infrastructure cybersecurity.
Work Location and Type
- Contract
- Onsite: Carrollton, TX
Work Environment / Physical Requirements
- Required to sit or stand, bend, type, and reach while performing daily functions.
- Daily work with office equipment and materials.
- During duties, employee sits at a desk or stands to perform other tasks.
Work environment descriptions and essential-function duties may vary; reasonable accommodation may be made for individuals with disabilities.