Senior Information Security Engineer

Saab, Inc.; United States; On-site; USD 102,000 - 132,000; Full time

Benefits offered by this job

Medical, vision, and dental insurance

8 holidays PTO

401(k) with employer contributions

Tuition assistance

Wellness resources

Employee stock purchase opportunities

Disability coverage

Job summary

Saab, Inc. in Syracuse seeks a Senior Information Security Engineer to design, implement, and secure Windows-based environments for customer deployments.

The role focuses on Active Directory, Group Policy, endpoint protection, and RBAC, with travel up to 30% and a requirement for strong Windows security expertise.

Applicants should have a Bachelor's degree and 8+ years of Windows security experience; US citizenship is required for this government-contractor position.

Qualifications

• Bachelor’s degree in Information Security, CS, IT or related field or equivalent experience.
• 8+ years of experience administering and securing Microsoft Windows environments.
• Hands-on Active Directory administration and GPOs experience.
• Experience deploying endpoint protection/antivirus platforms.

Responsibilities

• Design, implement, and manage Group Policy Objects (GPOs) to enforce security configurations and standards.
• Configure, administer, and harden Windows Server and Windows workstations for security deployments.
• Implement Active Directory security configurations including user/group management and OU structures.
• Design and implement RBAC and least-privilege access models.
• Deploy, configure, and manage endpoint protection and antivirus solutions.
• Apply system hardening practices aligned with security frameworks.
• Perform security assessments and remediation in Windows environments.
• Document configurations, controls, and deployment procedures for customers.
• Provide guidance and knowledge transfer to customer stakeholders.

Skills

Active Directory administration

Group Policy design

RBAC / IAM

Endpoint security

Security assessments

Education

Bachelor’s degree in Information Security / CS / IT

Tools

Microsoft Hyper-V

Splunk

PDQ

RSA Authentication Manager

Job description

• RSA Authentication Manager

Job Title:

Senior Information Security Engineer

Location:

Syracuse

Position Overview

We are seeking an experienced Information Security Engineer with strong Microsoft Windows infrastructure expertise to support the delivery of security solutions to our customers. This role will focus on implementing and securing Windows-based environments.

The ideal candidate will have hands-on experience with Active Directory, Group Policy management, endpoint protection, and role-based access control, and will work directly with customer environments to design, configure, and deploy secure Windows infrastructure solutions. Travel up to 30% may be required.

Key Responsibilities

• Design, implement, and manage Group Policy Objects (GPOs) to enforce security configurations and organizational standards within customer environments.
• Configure, administer, and harden Windows Server and Windows workstation systems as part of security solution deployments.
• Implement and maintain Active Directory security configurations, including user/group management, OU structures, and policy enforcement.
• Design and implement role-based access control (RBAC) and least-privilege access models.
• Deploy, configure, and manage endpoint protection and antivirus solutions.
• Apply system hardening practices aligned with industry security frameworks and best practices.
• Perform security assessments of Windows environments and implement remediation actions.
• Assist in creating secure configurations, patch processes, and compliance with security policies.
• Document system configurations, security controls, and deployment procedures for customer environments.
• Provide technical guidance and knowledge transfer to customer stakeholders when appropriate.

Desired Tool Experience

• Microsoft Hyper-V Virtualization
• Splunk
• PDQ
• RSA Authentication Manager

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience).
• 8+ years of experience administering and securing Microsoft Windows environments.
• Strong hands-on experience with Active Directory administration.
• Proven experience creating and managing Group Policy Objects (GPOs).
• Experience implementing role-based access control and identity management practices.
• Hands-on experience deploying or managing endpoint protection / antivirus platforms.
• Solid understanding of Windows security architecture and system hardening techniques.
• Experience performing security assessments and remediation

Preferred Qualifications

• Experience with Ansible or PowerShell scripting and automation.
• Familiarity with security monitoring tools and SIEM platforms.
• Knowledge of security frameworks such as NIST, CIS Benchmarks, or ISO 27001.
• Experience supporting enterprise or multi-tenant environments.
• Experience with protecting data at rest.
• Experience with stakeholder management.
• Current DoD clearance preferred
• Experience with JIRA is preferred.
• Relevant certifications such as:
  • CompTIA Security+
  • CISSP
  • Microsoft security or identity certifications
  • GIAC certifications

Compensation:

$101,600 - $132,000

The compensation range provided is a general guideline. When extending an offer, Saab, Inc. considers factors including (but not limited to) the role and associated responsibilities, location, and market and business considerations, as well as the candidate's work experience, key skills, and education/training.

Key Skills

• Windows security architecture
• Active Directory administration
• Group Policy design and management
• Endpoint security and antivirus management
• Identity and access management (IAM)
• System hardening and vulnerability remediation
• Security assessments and remediation
• Customer-facing technical delivery and documentation

Citizenship Requirements

Must be a U.S. citizen. Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Drug-Free Workplaces

Saab is a federal government contractor and adheres to policies and programs necessary for sustaining drug-free workplaces. As a condition of employment, candidates will be required to pass a pre-employment drug screen.

Benefits

• Medical, vision, and dental insurance for employees and dependents
• Generous paid time off, including 8 designated holidays
• 401(k) with employer contributions
• Tuition assistance and student loan assistance
• Wellness and employee assistance resources
• Employee stock purchase opportunities
• Short-term and long-term disability coverage

About Us

Saab is a leading defense and security company with an enduring purpose, to help nations keep their people and society safe. Empowered by its 28,000 talented people, Saab constantly pushes the boundaries of technology to create a safer and more sustainable world. In the U.S., Saab delivers advanced technology and systems, supporting the U.S. Armed Forces and the Federal Aviation Administration, as well as international and commercial partners. Headquartered in Syracuse, New York, the company has business units and local employees in ten U.S. locations.

Saab is a company where we see diversity as an asset and offer unlimited opportunities for advancing in your career. We are also a company that respects each person's needs and encourage employees to lead a balanced, rewarding life beyond work. Saab values diversity and is an affirmative action employer for protected veterans and individuals with disabilities.

Saab is an Equal Employment Opportunity employer, all qualified individuals are encouraged to apply and will be considered for employment without regard to race, color, religion, national origin, sex (including pregnancy), sexual orientation, gender identity, age, veteran, disability status, or any other federal, state, or locally protected category.