Sr Principal Cyber Systems Engineer-AHT

0090 CORP-Corporate Office; United States; On-site; USD 149,000 - 224,000; Full time

Benefits offered by this job

Relocation assistance

Secret clearance

Travel opportunities

Job summary

Northrop Grumman is seeking a Senior Principal Cyber Systems Engineer to design, implement, and secure Windows domain infrastructure and virtualized environments across classified networks. You will lead AD, DNS, GPO administration and manage VMware/vSphere and Horizon for mission-critical operations.

Expect collaboration with network, software, and cybersecurity teams, plus REMOte considerations and significant automation via PowerShell/Bash/Python.

Qualifications

• Bachelor's degree in a STEM field plus relevant experience or equivalent years of hands-on technical experience
• 5+ years of Windows Server and Active Directory administration in enterprise environments
• 3+ years of VMware vSphere and Horizon administration including VDI
• Experience with Linux/UNIX systems administration
• DoD 8570 IAM Level II or equivalent certification
• DISA STIGs/CIS hardening on Windows/Linux/virtualized infra
• Scripting/automation with PowerShell/Bash/Python
• Experience with NetApp/SAN storage
• Networking fundamentals for troubleshooting
• Proven mentorship abilities and teamwork
• U.S. Citizenship required, with ability to obtain/maintain clearance

Responsibilities

• Lead Windows domain infrastructure design, implementation, and administration for classified environments
• Manage VMware vSphere clusters, ESXi hosts, and Horizon VDI pools including upgrades and lifecycle management
• Design, implement, and enforce GPOs for security and standard configurations
• Administer Active Directory services including DNS, DHCP, user/group mgmt
• Create and maintain Windows and Linux VM gold images for deployment
• Develop automation scripts to streamline tasks and reduce errors
• Apply DISA STIGs and CIS hardening to Windows/Linux/virtualized infra
• Manage enterprise storage solutions (NetApp, SAN)
• Coordinate patch management across Windows and Linux
• Provide 24/7 on-call support and incident response participation
• Document architectures, procedures, and standards
• Interface with leadership and stakeholders to align infra with mission requirements

Skills

Windows Server administration

Active Directory

VMware vSphere/Horizon

Linux administration

Scripting (PowerShell/Bash/Python)

DISA STIG/CIS hardening

Networking fundamentals (DNS/DHCP/TCP\

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering

Tools

VMware vSphere

Horizon

Job description

RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE REQUIRED FOR START: Yes CLEARANCE TYPE: Secret TRAVEL: Yes, 10% of the Time

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Northrop Grumman Defense Systems delivers mission-critical solutions for global security. Our Engineering and Sciences organization advances engineering and scientific capabilities to design, produce, and sustain optimized product lines that give the warfighter a decisive edge. We seek bold, innovative engineers who embrace change, value cognitive diversity, and bring their full selves to work. Our employees don't just witness history—they make it.

What You'll Get to Do:

The new team member will design, implement, and secure enterprise Windows domain infrastructure, virtualization platforms, and cyber defense systems that support classified national defense programs. Lead the administration and strategic enhancement of Windows Server environments including Active Directory, DNS, Group Policy, and domain services across multiple security classification levels. Architect, deploy, and maintain VMware vSphere and Horizon VDI environments to support mission-critical operations and secure remote access solutions. Apply cybersecurity frameworks and compliance standards (DISA STIG, CIS Benchmarks) to harden systems and maintain security posture across classified networks. Provide technical leadership and mentorship to systems administration teams, driving best practices in virtualization, automation, and infrastructure lifecycle management. Collaborate with cross-functional teams including network engineers, software developers, and cybersecurity professionals to deliver integrated infrastructure solutions. Support high-visibility demonstrations and mission-critical operations through infrastructure readiness, troubleshooting, and rapid problem resolution. Ensure operational excellence through proactive monitoring, patch management, and continuous improvement of enterprise systems.

Responsibilities:

• Lead Windows domain infrastructure design, implementation, and administration for classified environments
• Manage VMware vSphere clusters, ESXi hosts, and Horizon VDI pools including upgrades, patching, and lifecycle management
• Design and implement Group Policy Objects (GPOs) to enforce security controls and standardize configurations
• Administer Active Directory services including DNS, DHCP, user/group management, and domain controller operations
• Create, optimize, and maintain Windows and Linux virtual machine gold images for enterprise deployment
• Develop and execute automation scripts (PowerShell, Bash, Python) to streamline administrative tasks and reduce human error
• Apply DISA STIGs and CIS hardening guidelines to Windows Server, Linux, and virtualized infrastructure
• Manage enterprise storage solutions (NetApp, SAN) integrated with virtualization platforms
• Coordinate patch management cycles across Windows and Linux systems following established security protocols
• Provide 24/7 on call support for critical infrastructure and participate in incident response activities
• Document system architectures, procedures, and configuration standards for enterprise environments
• Interface with program leadership, architects, and stakeholders to align infrastructure with mission requirements

Basic Qualifications for a Senior Principal Cyber Systems Engineer:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related STEM field plus 8 years of relevant experience; OR Master's degree plus 6 years of relevant experience; OR Associate's degree plus 12 years of relevant experience; OR 15+ years of equivalent hands‑on technical experience in lieu of degree
• 5+ years of hands‑on Windows Server and Active Directory administration including DNS, GPO, domain controller management, and troubleshooting in enterprise environments
• 3+ years of VMware vSphere and/or Horizon administration including ESXi host management, vCenter operations, VM lifecycle, and VDI pool management
• Experience with Linux/UNIX system administration (RHEL, CentOS, or similar) including user management, permissions, services, and bash scripting
• DoD 8570 IAT Level II or IAM Level II certification (Security+, CySA+, CASP+/SecurityX, CISSP, or equivalent)
• Demonstrated experience applying DISA STIGs and security hardening to Windows Server, Linux systems, and virtualized infrastructure
• Proficiency in scripting and automation using PowerShell, Bash, and/or Python for administrative tasks
• Experience with enterprise storage and backup solutions (NetApp, SAN, or equivalent)
• Experience with network fundamentals including TCP/IP, DNS, DHCP, VLANs, and basic switching/routing for troubleshooting
• Proven ability to work effectively in team environments and provide technical mentorship to junior staff
• US Citizenship is required
• A current/active U.S. Government Secret clearance with ability to get a TS

Preferred Qualifications for Senior Principal Cyber Systems Engineer:

• DoD 8570 IAM Level II or IAT Level III certification (CASP+/SecurityX, CISSP, CISM, or equivalent)
• CompTIA Linux+ or RHCE (Red Hat Certified Engineer) certification
• 5+ years of team lead or technical leadership experience managing systems administration teams or leading complex infrastructure projects
• Extensive experience with VMware Horizon VDI environments including deployment, optimization, certificate management, and troubleshooting
• Advanced Windows Server administration including multi‑site AD replication, federation services, and PKI/certificate management
• Experience with Citrix XenApp/XenDesktop or NetScaler environments
• Proficiency with DevOps tools and practices including GitLab, CI/CD pipelines, infrastructure-as-code, and configuration management
• Experience with monitoring and logging solutions (Grafana, Splunk, ELK stack, or equivalent)
• Hands‑on experience with containerization technologies (Docker, Kubernetes) and modern application deployment
• Experience designing and implementing secure network architectures including VPNs, firewalls (Cisco, Juniper, Palo Alto), and network segmentation
• Demonstrated experience in classified/high‑side environments supporting SAP or SCI programs
• Experience with Agile methodologies and working in cross‑functional DevSecOps teams
• Familiarity with Atlassian suite (JIRA, Confluence) for documentation and project tracking
• Secret clearance already adjudicated and active
• Strong written and verbal communication skills with ability to brief technical content to leadership

Primary Level Salary Range:

$149,300.00 - $223,900.00

The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.

Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results.

Employees in Vice President or Director positions may be eligible for Long Term Incentives.

In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.

The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO.

U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.

Existing Applicants: Need to update your contact information or email address? Once logged in, click on Candidate Home in the upper right corner and scroll to the bottom of that screen to see buttons for: Update Contact information to update your legal name, address, and phone number Edit Account Settings to edit your email address.

We are a pioneering company. With careers across all areas: air, cyber, land, sea and space – our 90,000 employees work as one to defend and define the future.

Northrop Grumman careers and internships are as varied as your interests, with a lifetime of potential that will give you every opportunity to do your best work. Working together with people from many backgrounds, personal passions and disciplines, we share a drive to push the boundaries of science, technology and engineering to meet the ever evolving needs of our customers worldwide.