Sr. Systems Security Engineer (Onsite - Largo, FL) TS/SCI Clearance required

Prattwhitney; Largo (FL); On-site; USD 87,000 - 165,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

RTX's Starburst Engineering Department in Largo, FL is seeking a Sr. Systems Security Engineer to contribute to the development and deployment of System Security solutions on the Starburst program. This onsite role requires an active TS/SCI clearance and transferability.

You will work with a multi-discipline team to implement requirements for deployed products, collaborate with Project Engineers, and support cyber risk posture and information assurance across the enterprise IT portfolio.

Qualifications

• Typically requires a STEM degree with 5 years of experience, or an advanced degree with 3 years.
• Active TS/SCI clearance required prior to start date.
• Experience with enterprise configuration and patch management using automated tools.

Responsibilities

• Work within the Security Engineering domain and deploy capabilities in a DoD air-gapped network.
• Create and present materials to convey concepts to diverse audiences.
• Onsite work in Largo, FL with some offsite opportunities.
• Document system schematics and operational guides and procedures.
• Interface with cross-functional teams to define cyber risk posture and mitigation.
• Travel up to 10% may be required.

Skills

TS/SCI clearance

Cybersecurity

DoD/IT security

Patching and configuration

Windows/Linux admin

Scripting (PowerShell/Bash)

VMware/virtualization

Education

STEM degree

Advanced degree (optional)

Tools

MECM/WSUS

ACAS/SCAP

Jira/Confluence

Job description

Sr. Systems Security Engineer

Position Role Type: Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance Type: TS/SCI - Current Security Clearance Status: Active and existing security clearance required on day 1

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Collins Aerospace is a leader in technologically advanced, intelligent solutions that help redefine the aerospace and defense industry. With a comprehensive portfolio and deep technical expertise, we help customers meet the demands of the global market. Join us and help shape the future of aerospace and defense. The Starburst Engineering Department is seeking a Sr. Systems Security Engineer to contribute to the development and deployment of System Security solutions on the Starburst program.

This candidate will be integrated into a multi-discipline team environment, with representation from System Engineers, Software Engineers, Cybersecurity, Digital Technology, and Field Services. Primary responsibilities are the implementation and sustainment of requirements for deployed products and services that are in operational and sustainment states. As a Systems Security Engineer, you will make a significant impact to the program’s execution, working with the Project Engineers (Cost Account Managers and Integrated Product Team Leads) and Domain Leads to execute the development and deployment of program products and services. This role will be worked onsite in Largo, FL and requires an active and transferrable TS/SCI clearance. Relocation assistance is available.

What You Will Do:

• Work within the Security Engineering domain and as a part of the larger enterprise engineering effort, you will operate within a custom, air-gapped, Department of Defense IT network on a daily basis to perform advanced support and direct deployment of new capabilities at a sustained rate
• Demonstrate your ability to create and present materials to convey concepts and ideas to a wide range of audiences
• Work primarily onsite in a closed area environment with occasionally opportunity to work offsite
• Demonstrate your ability to create, follow and update to system documentation, schematics and operational guides and procedures
• Demonstrate your ability to interface with other teams to help define, determine and implement cyber risk posture, cyber risk mitigation and information assurance throughout the enterprise IT service portfolio on a sustained level
• Travel up to 10% may be required

Qualifications

You Must Have:

• Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 5 years prior relevant experience or an Advanced Degree in a related field and minimum 3 years of experience
• Active and transferable U.S. government issued TS/SCI security clearance is required prior to start date
• Experience with enterprise configuration and patch management using automated tools such as Microsoft End-Point Configuration Manager (MECM) or Windows Systems Update Service (WSUS)
• Active DoD 8570 IAT Level II certification e.g. Security+ and/or CISSP, with the ability to maintain

We Prefer:

• Systems Administration using Linux and Windows desktop and server operating systems (Windows 11/Server 2022/2025/RHEL)
• Experience with traditional, and current on-prem enterprise IT systems and technologies and its impacts to the security of: Identification, Credential and Access Management (ICAM) for those systems
• Secure enterprise messaging Enterprise Logging Ingest, Cyber Situational Awareness and protection, Endpoint Detection and Response
• Proficient knowledge of Enterprise Identity Management applications and design including LDAP (e.g. Active Directory) and PKI
• Experience with DISA Security Technical Implementation Guides (STIGs) and Compliance scans using ACAS or SCAP Compliance Checker (SCC)
• Experience with various computing hardware and software platforms, including servers, workstations, supporting various COTS software applications, and custom software applications
• Experience maintaining Windows servers and troubleshooting software applications
• Understanding of traditional, and current on-prem enterprise IT systems and technologies and its impacts to the security of: Identification, Credential and Access Management (ICAM) for those systems. secure enterprise messaging Enterprise Logging Ingest, Cyber Situational Awareness and protection, Endpoint Detection and Response
• Experience with enterprise firewalls, including knowledge of firewall policies/rulesets
• Understanding of basic network engineering fundamentals, including: OSI layers, IP addressing, sub-netting, TCP/IP stack, VLANs, well-known ports and protocols, etc.
• Knowledge and experience leading or contributing to integration efforts involving either Cybersecurity, Risk Management Framework, or Information Assurance
• Knowledge of how to scan hardware and software for compliance and vulnerabilities utilizing industry tools such as Assured Compliance Assessment System (ACAS)
• Experience configuring and troubleshooting File Classification, labeling and associated policy tools (e.g. NextLabs, Boldon James), SIEM tools (e.g. Splunk), network monitoring tools (e.g. SolarWinds)
• Experience working with command-line interfaces and scripting (PowerShell, Bash, etc.)
• Experience with common VMware products (vSphere, vCenter, ESXi) and overall virtualization implementations
• Experience in maintaining and administering storage appliances (e.g. Pure Storage, Segate)
• Knowledge of Zero Trust principles
• Experience with Agile project methodologies, and Jira workflows.
• Experience in maintaining and administering storage appliances (e.g. Pure Storage, Segate) Agile Development Techniques such as Scrum or Kanban, using Atlassian Tool Suite (Jira, Confluence, Mattermost)
• Knowledge in DevSecOps, Digital Technology or Information Systems, specifically IT networks and enterprise applications
• Understanding of configuring and troubleshooting anti-virus applications and DLP, such as Trellix Sound foundation in Data Management and Configuration Management principles, process, and concepts

What We Offer:

• Medical, dental, and vision insurance
• Three weeks of vacation for newly hired employees
• Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
• Tuition reimbursement program
• Student Loan Repayment Program
• Life insurance and disability coverage
• Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
• Birth, adoption, parental leave benefits
• Carrot Health, fertility, and family planning Adoption Assistance
• Autism Benefit Employee Assistance Plan, including up to 10 free counseling sessions
• Healthy You Incentives, wellness rewards program
• Doctor on Demand, virtual doctor visits
• Bright Horizons, child and elder care services
• Teladoc Medical Experts, second opinion program
• And more!

The salary range for this role is 86,800 USD - 165,200 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement. Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company’s performance. This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply. RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.