System Engineer Subject Matter Expert

Leidos LLC; Norfolk (VA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos in Norfolk, VA is seeking a System Engineer to support the DISA Platform & Core Services team. You will design, integrate, and validate hardware and software for production environments, focusing on Windows and virtualized infrastructures including ESXi and Horizon.

Applicants should have DoD clearance, SME-level VM/Windows expertise, and strong scripting and documentation skills to produce SOPs and diagrams supporting enterprise operations.

Qualifications

• U.S. Citizenship
• Current DoD 8570/8140 IAT Level II or III certification required
• Active DoD Secret clearance at time of consideration
• BS with 4–8 years of relevant experience or MS with 2–6 years
• SME level knowledge of VM/WINDOWS virtualization and hardware solutions
• Experience with VMware ESXi, vCenter and Horizon environments

Responsibilities

• Design, plan, and implement complex integrated systems for virtual and physical hardware
• Lead hardware recommendations for procurement evolutions
• Coordinate engineering change documentation and brief leadership on details
• Perform system analysis and market research to guide modernization
• Develop technical optimization plans for vSphere/Horizon environments
• Create and maintain PowerShell scripts for virtual infrastructure
• Coordinate deployments to production (ESXi, VDI, and related upgrades)

Skills

VMware ESXi

PowerShell scripting

Windows Server

VDI

STIG compliance

RBAC

Technical writing

System analysis

Education

Bachelor's degree

Master's degree

8570/8140 IAT Level II/III Certification

Tools

VMware Horizon

vSphere

SCAP/Evaluate-STIG

iDRAC / Dell gear

PowerShell

Windows/Linux patching

Active Directory / GPOs

Job description

The Digital sector at Leidos is currently seeking a motivated, career-oriented System Engineer with proven experience to join the DISA Platform & Core Services team in Norfolk, VA to support the Hampton Roads DISA customer. The candidate will be responsible for assisting with technical planning, designing, system integration, verification/validation and support for total hardware devices and systems prior to deployment to the production network. This candidate will be participating in system integration efforts in support of the server and appliances in a Microsoft Windows environment, from design through implementation. This engineer will perform and assist with a wide variety of design, planning and installation, configuration and upgrading of both virtual and physical servers and related hardware and software in a LAN, WAN and stand-alone environment. Provides investigation, diagnostic testing and repair/resolution of server systems, hardware, software and infrastructure. Creates and delivers complex technical drawings and diagrams and approves Standard Operating Procedures and work instruction.

Primary Responsibilities

• Responsible for designing, technical planning, and implementing complex integrated total systems configuration for virtual appliances and physical hardware builds, installs, and upgrades.
• Provided technical review and expertise leading hardware LCR recommendations to leadership in consideration for equipment procurement evolutions.
• Responsible for evaluating virtual and physical system services and coordinating engineering configuration change review board (ECRB/CAB) documentation and brief board on technical details, requirements and milestones.
• Routinely conduct system analysis and market research to present white papers guiding Government leadership in modernization efforts.
• Create and implement multi-layered technical optimization plans for the unclassified and classified vSphere and Horizon enterprise environments.
• Create and maintain PowerShell scripts relating to virtual infrastructure and Microsoft servers.
• Plan, coordinate and execute virtual and physical deployments to production such as ESXi Hypervisor, VDI, and other required infrastructure upgrades, system enhancements, and enterprise LCM evolutions.
• Create, modify, and maintain Standard Operating Procedures/Work Instruction documentation.
• Regularly STIG vCenter, Photon OS, ESXi, virtual distributed switches, virtual machines, Microsoft Server OS, and Linux OS (i.e. RHEL, Oracle Linux).
• Deploy and maintain Microsoft Server 2019 and 2022.
• Experience with applying Windows/Linux patches, updates and hot fixes.
• Experience using Microsoft Powershell and scripting/automation.
• Regularly perform maintenance on Microsoft Domain Controllers, DNS, DHCP, and GPOs.
• Regularly perform maintenance and upgrades on VMware Horizon VDI environment.
• Plan and coordinate end point connected devices management, upgrades, enhancements.
• Coordinating system image builds IAW planned projects and initiatives and prepares deployment to production.
• Perform as SME in virtual system deep-dives, log analysis, and Linux command line in support of troubleshooting efforts and problem resolution.
• Respond to system faults, analyzing and correcting applications or system faults to reestablish service.
• Maintain and update relevant system and process documentation.
• Establish and maintain a strong working relationship with all team members.
• Successfully manage time and technical responsibilities, set accurate expectations and meet deliverable deadlines while working in a team collaboration environment.
• Maintain, update, install required certificates and track certificate revocation dates to ensure continuity of services.
• Test and implement patches for ESXi, vCenter, VMware Tools, (iLO/BIOS/Firmware/VC/OA), and Dell Servers (iDRAC, BIOS, Firmware).
• Implement and support Dell PowerStore Storage/SAN solutions.
• Understanding of system hardening, tools, guidelines and benchmarks and routinely conduct STIG compliance spot-checks on various Linux, Linux-like and Windows endpoints using SCAP/Evaluate-STIG and CLI.
• Regularly produce White Papers, COAs, pilot analysis as it pertains to new technology introduction and developmental work.

Basic Qualifications

• U.S. Citizenship
• Must have a current 8570/8140 IAT Level II or III: Security+ CE, VMWare VCP and System OS Cert (e.g. Linux / Windows server) prior to start.
• Active DoD Secret clearance at time of consideration.
• Requires BS and 4–8 years of prior relevant experience or Masters with 2–6 years of prior relevant experience.
• Experience in lieu of degree may be accepted.
• SME level knowledge and experience with VMWare ESXi Hypervisor technical integration of bare metal blade servers as well as rack server technology and hardware solutions.
• Solid understanding of VM Kernel Operating System installation and virtual server on physical server implementation.
• Proven experience and knowledge with implementing virtualization of SOFS/DFS nodes based on Windows Server Failover Cluster (WSFC) in support of file shares and folder redirections within VDI.
• Understanding of power shell scripting or programming for systems management.
• Experience with Virtual Desktop Infrastructure (VDI) / DaaS.
• Experience deploying configuring, modifying and deploying virtual images.
• Working knowledge and experience with VMware Horizon v7.0 or higher.
• Experience implementing end-user profile management solution based on FSLogix, VMware Clustered VMDKs, Clustered Shared Volumes, and Scale-Out File Server (SOFS).
• Strong understanding of enterprise, network, systems, operations and support.
• Experience and knowledge leveraging VMware Virtual Volume solutions to improve virtual environment storage agility.
• Strong understanding and experience with integrating VMware App Volumes solution to virtualize, secure, and rapidly deploy applications to the enterprise virtual environment.
• Deep understanding Role Based Access Control (RBAC) framework on unclassified and classified enclaves.
• Excellent writing and speaking skills.
• Experience with creating and maintaining network and computer datacenter diagrams, rack elevations, and drawings.
• Experience with applying DoD STIG requirements and using SCAP/Evaluate-STIG/STIG Viewer tool.
• Experience working with system security applications (ACAS) and mitigating vulnerabilities.

Preferred Qualifications

• 8570/8140 IAT Level III certification (CASP+CE, CISSP or CISSP Assoc).
• Experience with Linux Server OS (RHEL).
• VMWare VCAP (VMWare Certified Advance Professional) certification.
• Microsoft Azure Fundamentals (AZ900) or Microsoft Config & Operating Azure Virtual Desktop (AZ140).

If you're looking for comfort, keep scrolling.

At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Pay Range: Pay Range $87,100.00 - $157,450.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.

Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.