Senior Systems Engineer

Lead the design, implementation, and optimization of vulnerability management and patching strategies for virtualized infrastructures, network devices, and containerized workloads Interpret and implement DoW/DISA STIGs, CIS benchmarks, and other security baselines across operating systems, applications, networks, and container platforms Own the patch management lifecycle, including assessment, planning, testing, deployment, and verification Maintain and harden virtual machine environments, including cloud-native VMs Configure and maintain network devices such as routers, switches, and firewalls according to security policies, STIGs, and best practices Deploy and maintain container platforms such as Docker and Kubernetes/OpenShift, focusing on secure configuration, image scanning, and vulnerability remediation Integrate and leverage vulnerability scanning and configuration/compliance tools to identify, track, and remediate findings Collaborate with cybersecurity, network engineering, systems administration, and DevSecOps teams Participate in incident response and root cause analysis related to vulnerabilities, misconfigurations, and system security issues Drive corrective and preventive actions Ensure solutions meet contractual, regulatory, and compliance requirements including DoW directives, RMF/ATO, and NIST SP 800-53 Support a mission-critical environment through secure systems engineering, vulnerability management, patching, STIG implementation, and virtual machine, network device, and container sustainment Requirements Active DoW Security Clearance of SECRET, or higher BS and 5+ years of relevant systems engineering experience, including work in secure or mission-critical environments; other combinations of education, experience and certifications will be considered Compliance with DoW 8570/8140 requirements, such as CCSP, Security+ CE,

CISSP

, Security X/CASP+, or equivalent baseline certification Demonstrated experience leading vulnerability management and patching activities across complex, multi-platform environments Experience with Microsoft Azure Cloud services, including virtual machines, storage, and resource manager Experience implementing PKI and PIV standards, Active Directory or LDAP Experience with Group Policy Objects and management Hands-on experience implementing STIGs and security baselines for operating systems, network devices, virtualization platforms, and/or container platforms Experience maintaining and securing virtual machine infrastructures Experience supporting network infrastructure, including configuration, hardening, and troubleshooting of routers, switches, and firewalls Experience deploying and maintaining container-based environments such as Docker and Kubernetes, with secure configuration and image management Expertise with vulnerability scanning and compliance tools such as Tenable.sc/Nessus, ACAS, or similar Proficiency with automation and scripting such as Ansible, PowerShell, Python, and Bash Strong understanding of networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, VLANs, and VPNs Solid understanding of cybersecurity principles, controls, and frameworks such as NIST, RMF, and defense-in-depth strategies Strong written and verbal communication skills Demonstrated ability to work collaboratively across engineering, cybersecurity, operations, and customer teams Demonstrates expertise in vulnerability management, patching strategies, and secure systems engineering across virtualized infrastructures and containerized environments. Proficient in implementing security baselines and compliance requirements while collaborating effectively with cross-functional teams. Highest-signal resume keywords Vulnerability Management Patch Management Lifecycle STIG Implementation Container Security (Docker, Kubernetes) DoW Security Clearance Hard Skills Vulnerability Scanning Network Device Configuration Microsoft Azure Cloud Services Automation and Scripting (Ansible, PowerShell, Python, Bash) Cybersecurity Principles PKI and PIV Standards Group Policy Management Incident Response Root Cause Analysis Network Infrastructure Support Soft Skills Strong Written Communication Strong Verbal Communication Collaborative Teamwork Certifications & Qualifications DoW 8570/8140 Compliance CCSP Security+ CE CISSP Security X/CASP+ Industry Keywords DoW Directives

RMF/ATO

NIST SP 800-53

CIS Benchmarks Defense-in-Depth Strategies Tools & Technologies Tenable.sc/Nessus ACAS Docker Kubernetes OpenShift #J-18808-Ljbffr Jobtailor