Systems Engineer

Socket.dev; Hampton (VA); On-site; USD 130,000 - 140,000; Full time

Job summary

GovCIO is recruiting a Systems Engineer to lead Zero Trust integration efforts for the US Air Force, based at Langley AFB in Hampton, VA. This full-time, on-site role emphasizes designing, implementing, and optimizing enterprise systems across DoD environments.

Responsibilities include creating Zero Trust architectures, MFA/SSO, IAM/PAM, network segmentation, and telemetry pipelines to support decision engines with high availability and robust logging.

Qualifications

• DoD 8140 Level II or equivalent security certifications
• Clearance TS/SCI required
• Experience in requirements engineering and system design

Responsibilities

• Design and implement Zero Trust architectures across on-prem, cloud, and hybrid environments
• Engineer and maintain MFA, SSO, and federated identity services
• Create detailed technical designs and integration plans for authentication and network segmentation
• Integrate systems with SIEM, SOAR, and telemetry pipelines
• Ensure least-privilege access with policy design and access reviews

Skills

TS/SCI clearance

Sec+CE/SSCP/CND/CCNA Security

Requirements engineering

Systems architecture

Engineering principles

Education

High School diploma or equivalent

Tools

ZTNA

SDP

IAM

PAM

XDR

Job description

GovCIO is currently hiring a Systems Engineer for our Zero Trust integration effort with the US Air Force. The Systems Engineer’s role is designing, managing, and optimizing complex enterprise systems ensuring their efficiency and reliability across the intelligence community in support of the United States Air Force Headquarters Air Force A2 (HAF/A2).

This position will be located at Langley AFB, Hampton, VA and will be a full-time on-site position.

Responsibilities

• Design and implement Zero Trust architectures across enterprise environments (on-prem, cloud, hybrid).
• Develop identity-centric, least-privilege access models leveraging Zero Trust principles.
• Create detailed technical designs, diagrams, and system integration plans for authentication, authorization, and network segmentation.
• Evaluate and recommend Zero Trust technologies (e.g., ZTNA, SDP, IAM, PAM, microsegmentation, SASE).
• Engineer and maintain solutions for multi-factor authentication (MFA), single sign-on (SSO), and federated identity services.
• Implement continuous authentication and risk-based access controls.
• Integrate identity services with applications, APIs, and endpoints.
• Ensure proper enforcement of least privilege, including policy design and periodic access reviews.
• Implement microsegmentation (host-based or network-based) for sensitive workloads.
• Configure and maintain software-defined perimeter (SDP) or Zero Trust Network Access (ZTNA) solutions.
• Integrate systems with SIEM, SOAR, XDR, and behavior analytics tools to provide continuous monitoring.
• Maintain high-availability and performance of Zero Trust platforms.
• Implement robust logging, auditing, and telemetry pipelines to support decision engines.

Qualifications

High School with 9+ years (or commensurate experience)

Required Skills and Experience

• Clearance Required: TS/SCI
• DoD 8140 Level II (Sec+CE, SSCP, CND, CCNA Security, etc)
• Requirements engineering (writing, analyzing, validating)
• Systems architecture and design
• Knowledge of systems engineering principles
• Requirements & architecture competency

Preferred Skills and Experience

• Experience with DoD NIPR, SIPR and JWICS Networks
• Experience with Zero Trust Fundamentals
• Experience with the Air Force Intelligence Community
• System modeling and simulation
• Lifecycle management (V-model, waterfall, agile, MBSE)
• System integration & testing

Posted Salary Range

USD $130,000.00 - USD $140,000.00 /Yr.