System Engineer 3-BP-287

Onyx Point, Inc.; Hanover (MD); On-site; USD 78,000 - 250,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Generous PTO & holidays

Tuition reimbursement

Remote work options

Technology allowance

Bonus opportunities

Inclusive workplace culture

Job summary

Onyx Point, Inc. seeks a seasoned Systems Engineer with active TS/SCI security clearance and full scope polygraph to lead secure enterprise operations. You will deploy Nessus and patch management, automate Linux tasks with Ansible, and maintain SOPs and documentation.

The role requires extensive SE experience and a Bachelor’s degree in a related field. Remote work options and a comprehensive benefits package are available.

Qualifications

• Active TS/SCI with Full Scope Polygraph, U.S. citizenship required.
• 20+ years as a Systems Engineer in large-scale programs.
• Bachelor’s degree in System Engineering, Computer Science, Information Systems or related field.

Responsibilities

• Deploy, configure, and maintain Tenable Nessus Security Center and vulnerability scanners.
• Implement Ansible in Linux environments to automate tasks using playbooks.
• Develop and maintain automation scripts for system administration, security, and ops.
• Update SOPs, technical docs, and system configuration records.
• Harden Windows and Linux OS per STIGs and SELinux requirements.
• Manage patch infrastructure: WSUS, YUM, BigFix libraries, ePO content, and Red Hat Satellite.
• Generate and remediate security/vulnerability reports across enterprise.
• Deploy and manage ePO security policies and endpoint configurations.
• Apply Windows security updates using WSUS/BigFix.
• Administer AD, GPOs, DNS, DHCP, and SSL/TLS.

Skills

Security clearance awareness

Systems engineering leadership

Education

Bachelor's degree in an engineering/IT field

Tools

Nessus

Ansible

PowerShell

Bash

Python

BigFix

ePO

Job description

TO BE CONSIDERED FOR THIS POSITION YOU MUST HAVE AN ACTIVE TS/SCI W/ FULL SCOPE POLYGRAPH SECURITY CLEARANCE (U.S. CITIZENSHIP REQUIRED)

Responsibilities

• Deploy, configure, and maintain Tenable Nessus Security Center and vulnerability scanners.
• Implement Ansible in Linux environments to automate administrative and operational tasks using playbooks.
• Develop, implement, and maintain automation scripts to streamline recurring system administration, security, and operational activities.
• Update, maintain, and develop Standard Operating Procedures (SOPs), technical documentation, and system configuration records.
• Harden Windows and Linux operating systems in accordance with applicable security policies, Security Technical Implementation Guides (STIGs), and SELinux requirements.
• Maintain patch management infrastructure, repositories, and security content, including Windows Server Update Services (WSUS), YUM repositories, BigFix libraries, McAfee ePolicy Orchestrator (ePO) content, and Red Hat Satellite servers.
• Generate security and vulnerability reports, analyze findings, and remediate vulnerabilities throughout the enterprise environment.
• Deploy and manage ePO security policies and endpoint security configurations.
• Apply Windows security updates using WSUS, BigFix, or other approved enterprise patch management solutions.
• Administer and troubleshoot Active Directory, Group Policy Objects (GPOs), DNS, DHCP, and SSL/TLS.

Technology

• Tenable Nessus Security Center and Nessus scanners.
• Ansible playbooks for Linux automation and configuration management.
• PowerShell, Bash, Python, BigFix Action Script, and BigFix Relevance language.
• WSUS, BigFix(Must Have), NESSUS and McAfee ePO.
• Experience with Red Hat Enterprise Linux (RHEL)8/9 and Windows Server 2022/2025, Active Directory, GPO, DNS, DHCP, and SSL/TLS.

Required Experience

Shall have a minimum of Twenty (20) years’ experience as a SE in programs and contracts of similar scope, type and complexity is required.

Demonstrated experience in planning and leading Systems Engineering efforts is required.

Desired Experience

Five (5) years of additional SE experience may be substituted for a bachelor’s degree

Education

A Bachelor’s degree in System Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or related professional engineering discipline from an accredited college or university is required.

Compensation: We are committed to providing fair and competitive compensation. The salary range for this position is $78,000 to $250,000 per year. This range reflects the compensation offered across the locations where we hire. The exact salary will be determined based on the candidate's work location, specific role, skill set, and level of expertise.

Benefits

• Health Coverage: Medical, dental, and vision insurance
• Additional Insurance: Basic Life/AD&D, Voluntary Life/AD&D, Short and Long-Term Disability, Accident, Critical Illness, Hospitalization Indemnity, and Pet Insurance
• Retirement Plan: 401(k) plan with company match
• Paid Time Off: Generous PTO, paid holidays, parental leave, and more
• Wellness: Access to wellness programs and mental health support
• Professional Development: Opportunities for growth, including tuition reimbursement

Additional Perks

• Flexible work arrangements, including remote work options
• Flexible Spending Accounts (FSAs)
• Employee referral programs
• Bonus opportunities
• Technology allowance
• A diverse, inclusive, and supportive workplace culture