Senior Systems Engineer

Jobtailor; Fort Meade (MD); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

DoD Clearance

On-site work

Job summary

Jobtailor is seeking a senior security engineer to lead vulnerability management, patching, and secure systems engineering for virtualized infrastructures and containers. You will implement DoW/STIG baselines and RMF controls while collaborating across Cybersecurity, Networking, and DevSecOps teams to sustain mission-critical environments.

Applicants should hold active DoW clearance, a BS in a related field, and 5+ years in secure operations; expertise with Azure, PKI/PIV, AD/LDAP, and GPOs is

Qualifications

• BS in Computer Science, Engineering, or related field; 5+ years in secure/mission-critical environments.
• Experience leading vulnerability management and patching across multi-platform environments.
• DoD 8570/8140 compliant certifications (e.g., CCSP, Security+ CE, CISSP).
• Experience with Azure cloud services, including VMs, storage, and Resource Manager.
• Hands-on with PKI/PIV, AD/LDAP, GPOs; securing OSes, networks, and containers.

Responsibilities

• Lead design, implementation, and optimization of vulnerability management and patching strategies across VMs, network devices, and container workloads.
• Interpret and implement DoW/DISA STIGs, CIS benchmarks, and other baselines across OSes, apps, networks, and containers.
• Own the patch management lifecycle: assess, plan, test, deploy, verify, and report.
• Maintain hardened virtual machine environments and container platforms with secure config and image scanning.
• Collaborate with Cybersecurity, Network, Systems, and DevSecOps teams; participate in incident response and RCA.

Skills

Vulnerability Management

Patch Management

STIG Implementation

Container Security

Azure Cloud

PKI & PIV

Group Policy

Automation Scripting

Incident Response

NIST RMF

Education

BS in Computer Science/Engineering

Tools

Tenable.sc

Nessus

ACAS

Docker

Kubernetes

OpenShift

Job description

• Lead the design, implementation, and optimization of vulnerability management and patching strategies for virtualized infrastructures, network devices, and containerized workloads
• Interpret and implement DoW/DISA STIGs, CIS benchmarks, and other security baselines across operating systems, applications, networks, and container platforms
• Own the patch management lifecycle, including assessment, planning, testing, deployment, and verification
• Maintain and harden virtual machine environments, including cloud-native VMs
• Configure and maintain network devices such as routers, switches, and firewalls according to security policies, STIGs, and best practices
• Deploy and maintain container platforms such as Docker and Kubernetes/OpenShift, focusing on secure configuration, image scanning, and vulnerability remediation
• Integrate and leverage vulnerability scanning and configuration/compliance tools to identify, track, and remediate findings
• Collaborate with cybersecurity, network engineering, systems administration, and DevSecOps teams
• Participate in incident response and root cause analysis related to vulnerabilities, misconfigurations, and system security issues
• Drive corrective and preventive actions
• Ensure solutions meet contractual, regulatory, and compliance requirements including DoW directives, RMF/ATO, and NIST SP 800-53
• Support a mission-critical environment through secure systems engineering, vulnerability management, patching, STIG implementation, and virtual machine, network device, and container sustainment

Requirements

• Active DoW Security Clearance of SECRET, or higher
• BS and 5+ years of relevant systems engineering experience, including work in secure or mission-critical environments; other combinations of education, experience and certifications will be considered
• Compliance with DoW 8570/8140 requirements, such as CCSP, Security+ CE, CISSP, Security X/CASP+, or equivalent baseline certification
• Demonstrated experience leading vulnerability management and patching activities across complex, multi-platform environments
• Experience with Microsoft Azure Cloud services, including virtual machines, storage, and resource manager
• Experience implementing PKI and PIV standards, Active Directory or LDAP
• Experience with Group Policy Objects and management
• Hands-on experience implementing STIGs and security baselines for operating systems, network devices, virtualization platforms, and/or container platforms
• Experience maintaining and securing virtual machine infrastructures
• Experience supporting network infrastructure, including configuration, hardening, and troubleshooting of routers, switches, and firewalls
• Experience deploying and maintaining container-based environments such as Docker and Kubernetes, with secure configuration and image management
• Expertise with vulnerability scanning and compliance tools such as Tenable.sc/Nessus, ACAS, or similar
• Proficiency with automation and scripting such as Ansible, PowerShell, Python, and Bash
• Strong understanding of networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, VLANs, and VPNs
• Solid understanding of cybersecurity principles, controls, and frameworks such as NIST, RMF, and defense-in-depth strategies
• Strong written and verbal communication skills
• Demonstrated ability to work collaboratively across engineering, cybersecurity, operations, and customer teams

Demonstrates expertise in vulnerability management, patching strategies, and secure systems engineering across virtualized infrastructures and containerized environments. Proficient in implementing security baselines and compliance requirements while collaborating effectively with cross-functional teams.

Highest-signal resume keywords

• Vulnerability Management
• Patch Management Lifecycle
• STIG Implementation
• Container Security (Docker, Kubernetes)
• DoW Security Clearance

Hard Skills

• Vulnerability Scanning
• Network Device Configuration
• Microsoft Azure Cloud Services
• Automation and Scripting (Ansible, PowerShell, Python, Bash)
• Cybersecurity Principles
• PKI and PIV Standards
• Group Policy Management
• Incident Response
• Root Cause Analysis
• Network Infrastructure Support

Soft Skills

• Strong Written Communication
• Strong Verbal Communication
• Collaborative Teamwork

Certifications & Qualifications

• DoW 8570/8140 Compliance
• CCSP
• Security+ CE
• CISSP
• Security X/CASP+

Industry Keywords

• DoW Directives
• RMF/ATO
• NIST SP 800-53
• CIS Benchmarks
• Defense-in-Depth Strategies

Tools & Technologies

• Tenable.sc/Nessus
• ACAS
• Docker
• Kubernetes
• OpenShift