Systems Engineer

By Light Professional IT Services; Tampa (FL); On-site; USD 130,000 - 185,000; Full time

Job summary

By Light Professional IT Services is seeking a senior IT security engineer to work on high-visibility programs for warfighters and federal agencies. The role involves independent work, leading teams, and delivering secure designs and documentation across government systems.

The candidate will apply NIST/DOD security controls, develop ICDs, and coordinate with government stakeholders while supporting after-hours events as needed.

Qualifications

• BA/BS degree required; security-focused computing environment experience preferred.
• 10+ years of experience in DoD or government IT/security programs.
• Certifications: at least one IAT Level II and a CE/CE cert; cloud and security tools experience.

Responsibilities

• Lead design and security assessment activities across projects.
• Develop design COAs and ICDs for system integrations.
• Ensure documentation is version-controlled per CM processes.
• Coordinate with government leads to meet mission requirements.
• Implement security controls per NIST/DOD guidelines and prepare sprint reviews.

Skills

10+ years experience

Independent worker

Excellent written and oral comms

Education

BA/BS degree

CE certification or certificate

One of IAT Level II certifications (e.g., CompTIA Security+ CE, CECCNA-Security, CySA+, GICSP, GSEC, CND, SSCP)

Tools

Azure

AWS

Linux

Windows Server 2012/2016

Active Directory / LDAP / Kerberos

Storage SAN/NAS

Interface control docs (ICDs)

NIST & DOD security controls

Job description

Company Overview

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

Position Overview

The successful candidate works on high-visibility or mission critical aspects of a given program and performs all functional duties independently; oversees the efforts of less senior staff and/or is responsible for the efforts of all staff assigned to a specific job.

This position is Monday through Friday, normal business hours. However, employee may be required to provide after-hours and weekend support during planned or emergency events.

Responsibilities

• Conduct continuous technology assessments and market surveys to identify COTS and GOTS solutions applicable to modernization requirements.
• Conduct Analyses of Alternatives (AoA) that evaluate candidate systems for security posture, SWaP advantages, and operational suitability at the tactical edge, documenting trade-off analyses and recommendations.
• Develop and present Design COAs to the Government for review and selection, documenting trade-off analyses and recommendations.
• Develop and document both Physical Infrastructure Architecture Diagrams and Logical Software Architecture Diagrams that satisfy validated requirements. Diagrams shall define each interface’s distant-end connection, delineate the contractor’s and Government’s respective points of responsibility, and support continuous feedback. Integration points shall be captured in Interface Control Documents.
• Maintain design documentation in a Government-approved repository and update it IAW the configuration management process.
• Coordinate with leads to ensure functional designs align with operational concepts and mission requirements.
• Develop and maintain physical and logical design documentation for all systems within scope.
• Produce and manage ICDs or equivalent interface specifications for all integration points between systems and external interfaces.
• Update design documentation and interface specifications of any approved design change.
• Ensure all design artifacts are version-controlled and maintained in the Government-approved configuration management tool.
• Implement security controls IAW applicable NIST publications, DODI 8500.01, DODI 8510.01
• Assess and document security control implementation at each sprint boundary and MVP release gate.
• Deliver and integrate NetSecOps platforms as directed by the Government, prioritizing configuration of existing enterprise tools over custom development.
• Provide cybersecurity expertise to support the integration and validation of new capabilities within a laboratory environment.

Required Experience/Qualifications

• BA/BS degree
• Ten (10) years or more experience.
• One of these IAT Level II certifications: CompTIA Security + CE, CECCNA-Security, CySA+ **, GICSP, GSEC, CND, SSCP.
• A Computing Environment (CE) certification or certificate for the technical area of responsibility in either Network support/defense (e.g., Splunk, Cisco, McAfee, etc.) OR (e.g., Microsoft, Linux, Solaris, etc.).
• Must possess competencies in installation, service design, and support in an environment that uses Microsoft Windows Server 2012/2016.
• Experience with Azure or AWS Cloud Environments.
• Experience with Linux.
• Conceptual knowledge of Storage systems (SAN/NAS).
• Working knowledge of authentication functions and protocols such as LDAP, Kerberos, and Active Directory.
• Experience with production environments.
• Must be able to work independently and as part of a team.
• Must be available to participate in on-call work on a reoccurring basis.
• Solid troubleshooting skills and demonstrated ability of end-to-end problem management and ownership.
• Excellent written and oral communication skills.

Preferred Experience/Qualifications

• MA/MS.
• DoD TS/SCI clearance.
• ITILv4 Foundations certification.
• One of the IAM Level II certifications: CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, HCISPP.
• Any of the following IT certifications are also desirable for this position: MCP, CompTIA A+ / Network+ / Security+, AWS, Azure.

Special Requirements/Security Clearance

• DoD Secret clearance or higher.