Systems Engineer

By Light Professional IT Services LLC; Tampa (FL); On-site; USD 110,000 - 170,000; Full time

Job summary

By Light Professional IT Services LLC seeks a senior IT security professional to support government programs. The role involves implementing security controls across Windows, Linux, and cloud environments, developing architecture and interface documents, and performing continuous risk analysis.

Strong investigation, collaboration, and on-call readiness are essential. Responsibilities include designing secure architectures, conducting AoA analyses, and delivering NetSecOps platforms in a lab and

Qualifications

• BA/BS degree required.
• 10+ years of experience preferred.
• One of the IAT Level II certs listed (e.g., Security+ CE, CCNA-Security, CySA+, GICSP, GSEC, CND, SSCP).
• CE certification in computing environment for network/support or operating systems (e.g., Windows, Linux).
• Experience with Azure or AWS cloud environments.
• Experience with Linux.
• Knowledge of storage systems (SAN/NAS).
• Familiar with authentication protocols (LDAP, Kerberos, Active Directory).
• Must work independently and in a team; on-call availability.
• Strong troubleshooting and end-to-end problem management.

Responsibilities

• Identify COTS and GOTS solutions for modernization requirements.
• Analyze alternatives and document security posture and operational suitability.
• Develop Design COAs and interface definitions for government review.
• Create and maintain architectural diagrams and interface control documents.
• Maintain design artifacts in government-approved repos and CM tools.
• Coordinate across leads to align designs with requirements.
• Deliver NetSecOps platforms and support cybersecurity in labs.
• Provide cybersecurity expertise for integration and validation.

Skills

Independent work

Team collaboration

Communication

On-call readiness

Education

BA/BS degree

Tools

CompTIA Security+ CE

Azure

AWS

Windows Server 2012/2016

LDAP/AD/Kerberos

Job description

Company Overview

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

Position Overview

The successful candidate works on high-visibility or mission critical aspects of a given program and performs all functional duties independently; oversees the efforts of less senior staff and/or is responsible for the efforts of all staff assigned to a specific job.

This position is Monday through Friday, normal business hours. However, employee may be required to provide after-hours and weekend support during planned or emergency events.

Responsibilities

• Conduct continuous technology assessments and market surveys to identify COTS and GOTS solutions applicable to modernization requirements.
• Conduct Analyses of Alternatives (AoA) that evaluate candidate systems for security posture, SWaP advantages, and operational suitability at the tactical edge, documenting trade-off analyses and recommendations.
• Develop and present Design COAs to the Government for review and selection, documenting trade-off analyses and recommendations.
• Develop and document both Physical Infrastructure Architecture Diagrams and Logical Software Architecture Diagrams that satisfy validated requirements. Diagrams shall define each interface’s distant-end connection, delineate the contractor’s and Government’s respective points of responsibility, and support continuous feedback. Integration points shall be captured in Interface Control Documents.
• Maintain design documentation in a Government-approved repository and update it IAW the configuration management process.
• Coordinate with leads to ensure functional designs align with operational concepts and mission requirements.
• Develop and maintain physical and logical design documentation for all systems within scope.
• Produce and manage ICDs or equivalent interface specifications for all integration points between systems and external interfaces.
• Update design documentation and interface specifications of any approved design change.
• Ensure all design artifacts are version-controlled and maintained in the Government-approved configuration management tool.
• Implement security controls IAW applicable NIST publications, DODI 8500.01, DODI 8510.01
• Assess and document security control implementation at each sprint boundary and MVP release gate.
• Deliver and integrate NetSecOps platforms as directed by the Government, prioritizing configuration of existing enterprise tools over custom development.
• Provide cybersecurity expertise to support the integration and validation of new capabilities within a laboratory environment.

Required Experience/Qualifications

• BA/BS degree

• Ten (10) years or more experience.

• One of these IAT Level II certifications: CompTIA Security + CE, CECCNA-Security, CySA+ **, GICSP, GSEC, CND, SSCP.

• A Computing Environment (CE) certification or certificate for the technical area of responsibility in either Network support/defense (e.g., Splunk, Cisco, McAfee, etc.) OR (e.g., Microsoft, Linux, Solaris, etc.).

• Must possess competencies in installation, service design, and support in an environment that uses Microsoft Windows Server 2012/2016.

• Experience with Azure or AWS Cloud Environments.

• Experience with Linux.

• Conceptual knowledge of Storage systems (SAN/NAS).

Working knowledge of authentication functions and protocols such as LDAP, Kerberos, and Active Directory.

• Experience with production environments.

• Must be able to work independently and as part of a team.

• Must be available to participate in on-call work on a reoccurring basis.

• Solid troubleshooting skills and demonstrated ability of end-to-end problem management and ownership.

• Excellent written and oral communication skills.

Preferred Experience/Qualifications

• MA/MS.
• DoD TS/SCI clearance.
• ITILv4 Foundations certification.
• One of the IAM Level II certifications: CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, HCISPP.

• Any of the following IT certifications are also desirable for this position: MCP, CompTIA A+ / Network+ / Security+, AWS, Azure.

Special Requirements/Security Clearance

• DoD Secret clearance or higher.