Systems Engineer - Security

PAE Government Services Inc.; Columbia (MD); On-site; USD 155,000 - 175,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off

Retirement benefits (401(k) matching)

Educational reimbursement

Job summary

PAE Government Services Inc. is seeking a skilled security engineer to manage enterprise-level security for various network environments. The role involves architecting security controls, leading patch management, and mentoring junior engineers while ensuring compliance with federal standards.

The ideal candidate will have 6+ years in security engineering and relevant certifications like CISSP. This role offers a competitive salary range of $155,000 to $175,000, plus comprehensive benefits including health insurance, 401(k) matching, and educational reimbursement.

Qualifications

• 6+ years of experience in security engineering for enterprise IT systems.
• Ability to lead security engineering initiatives across Linux/Windows.
• Experience with compliance frameworks like NIST RMF and 800-53.

Responsibilities

• Architect and maintain enterprise security controls across various environments.
• Lead patch management processes and oversee updates.
• Conduct vulnerability assessments and develop mitigation strategies.

Skills

Security infrastructure architecting

Security tools management

Vulnerability management

Troubleshooting

Mentoring junior engineers

Education

Bachelor’s Degree

Tools

Ivanti

WSUS

Trellix

Tenable

Job description

Purpose and Impact

Come be a part of an exciting and ever‑changing program that provides a comprehensive range of state‑of‑the‑art solutions and hands‑on assistance in designing, implementing, managing, and sustaining operations across various network environments for our customer. We provide an environment that fosters and supports innovation and valuing “outside‑the‑box” thinking to solve complex problems. There are several training opportunities for team members that want to learn new technologies and stay current with their technical skillset.

Work Schedule

8hrs/day, 5days per week, all onsite. Must be able to support Thursday night patching after hours (starting at 5pm). Occasional travel will be available.

Key Responsibilities

• Architect, implement, and maintain enterprise security controls and infrastructure components across Windows, Linux, and virtualized environments.
• Lead the design, deployment, configuration, and lifecycle management of endpoint hardening and security tools (e.g., Ivanti, WSUS, Trellix, Tenable).
• Oversee patch management processes, including OS updates, third‑party software updates, and administrative tool upgrades.
• Provide expert‑level troubleshooting, root‑cause analysis, and performance optimization for complex security and infrastructure issues.
• Evaluate, recommend, and lead the adoption of new security tools, technologies, and methodologies.
• Develop and maintain security documentation, including SSPs, RMF artifacts, engineering diagrams, and operational procedures.
• Design and implement security requirements within enterprise business processes and technical architectures.
• Support vulnerability assessments, interpret results, and develop risk‑based mitigation strategies.
• Conduct system hardening, configuration baselining, and compliance scanning to ensure adherence to security standards.
• Support and guide incident response activities, including forensic analysis and containment strategies.
• Collaborate with cross‑functional teams to ensure security is embedded throughout system lifecycles.
• Mentor and provide technical leadership to junior and mid‑level security engineers.
• Contribute to long‑term security strategy, capability development, and continuous improvement initiatives.
• Support a diverse set of enterprise networks and mission environments as part of a high‑performing security engineering team.

Qualifications

6+ years of progressive experience designing, engineering, and securing enterprise‑scale IT systems across complex network environments. Senior‑level knowledge in architecting, deploying, and maintaining security infrastructure, including endpoint protection, vulnerability management, configuration management, and enterprise hardening solutions. Demonstrated experience leading security engineering initiatives, including implementing advanced security controls, designing secure configurations, and overseeing patch and update strategies for Linux and Windows environments. Extensive hands‑on experience with enterprise security tools such as Ivanti, WSUS, Trellix, Tenable, or equivalent platforms. Strong understanding of security frameworks and compliance requirements (e.g., NIST RMF, NIST 800‑53, STIGs, or equivalent federal/DoD standards). Demonstrated ability to lead complex troubleshooting efforts, perform root‑cause analysis, and drive long‑term remediation strategies across enterprise systems. Experience mentoring junior engineers, providing technical leadership, and contributing to team capability development.

Required Certifications

• One or more IAT/Management‑level certification: CASP+, CISSP, or equivalent senior‑level certification.
• Vendor certification in one or more relevant technologies (e.g., Microsoft, VMware, Cisco, NetApp, Pure Storage, HP, Dell, Linux+, RedHat, HBSS, ACAS).
• Candidate must maintain an active certification or obtain at least one within 6 months of hire.

Preferred Qualifications

• Bachelor’s Degree.
• Experience working within a SOC.
• Prior military experience.

Security Clearance

TS/SCI.

Compensation

$155,000 - $175,000. The compensation range or hourly rate listed for this position is provided as a good‑faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.

Benefits

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits (including 401(k) matching)
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax‑saving options
• Disability and life insurance
• Pet insurance

EEO Statement

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status.