Cybersecurity Engineer II (Contract to Hire)

The Engineer II, Cybersecurity Engineering contributes to the delivery of secure command-and-control systems for nuclear and other critical infrastructure environments. Responsibilities span the execution of assigned system delivery packages within a V-Model framework and in collaboration with multidisciplinary teams, in accordance with established engineering processes and technical direction. Success in this role requires applying established standards, procedures, and templates with increasing independence while developing the systems engineering knowledge, technical competency, and professional judgment needed to execute increasingly complex system delivery efforts.

JOB RESPONSIBILITIES, DUTIES & CORE FUNCTIONS

Requirements Definition & Analysis Support the translation of customer cybersecurity requirements into traceable component-level specifications using the Standard V-Model, in collaboration with Project Engineering Leads. Maintain requirements and traceability records for assigned scope, and flag gaps, conflicts, or ambiguities for resolution. Provide effort estimates for assigned tasks. System Design & Architecture Contribute to the design of cybersecurity architectures for AIM SCS and COTS-based command-and-control solutions, including network segmentation, access control, encryption, and secure communications, applying established designs and baselines traceable to NEI 08-09 and CIS benchmark controls. Develop and maintain design documentation for assigned scope, including network diagrams, configuration specifications, and cybersecurity control mapping matrices, with traceability to system requirements. Integration & Build Stand up, configure, and deploy platform environments of 20–30 Windows servers and workstations, virtualized infrastructure, Linux-based security appliances, network switches, and firewalls within an Active Directory domain, applying defined Group Policy-based security controls and hardening standards and following approved procedures and design documentation. Execute COTS solution integration tasks by performing system hardening, vulnerability analysis, patching, and documenting results. Diagnose and resolve integration issues using a systematic, analytical approach, escalating complex or cross-discipline issues as needed, and documenting resolution paths. Maintain configuration management records throughout the build, documenting changes and deviations to preserve a complete audit trail. Verification & Validation Verify that assigned product feature sets meet functional and cybersecurity acceptance criteria prior to formal test completion. Support the development and execution of cybersecurity test procedures mapped through a Requirements Traceability Matrix (RTM) to validate compliance with applicable requirements. Support Acceptance Testing, performing vulnerability assessments and security scans, and documenting and tracking findings through disposition. Onsite Customer System Turn-Up & Support Support onsite deployment at customer sites, performing physical installation, network commissioning, Active Directory integration, and system configuration in accordance with site-specific cybersecurity commissioning procedures. Assist with Site Acceptance Testing (SAT) in coordination with customer security, IT/OT, and operations staff, and communicate technical status and test results to the project team. Assist with training facility personnel and preparing turnover packages. Travel up to 25%. Lifecycle Support & Continuous Improvement Capture lessons learned from system deliveries and recommend improvements to build, integration, and test procedures. Follow and help maintain team standards, playbooks, and technical library content to ensure consistency of engineering processes and solutions. Build proficiency in nuclear regulatory and cybersecurity standards through on-the-job experience, training, and mentoring from senior team members. Other duties as required.

KNOWLEDGE, EXPERIENCE, & SKILLS

Required Bachelor’s degree in Cybersecurity, Systems Engineering, Computer Science, Electrical Engineering, Information Technology, or a related discipline. 2 to 4 years of hands-on experience in cybersecurity, systems, or network engineering. Working knowledge of Windows Server and Active Directory, virtualization, and networking fundamentals (switching, routing, and firewalls). Familiarity with system hardening, vulnerability scanning, and patch management. Clear verbal and written communication skills with the ability to produce technical documentation and report status. Familiarity with systems engineering lifecycle practices such as the V-Model. U.S. citizenship or permanent resident status required; ability to obtain site access credentials at nuclear power plants and government facilities. Preferred Experience in project-based work with requirements-driven deliverables. Experience with Linux-based appliances and virtualized clusters. Exposure to nuclear power, defense, or other NRC/DOE/DOD-regulated environments, including nuclear communications systems and terminology. Familiarity with NEI 08-09, NIST SP 800-82, NIST SP 800-53, IEC 62443, and NRC 10 CFR 73.54. Security+, GICSP, or equivalent certification (or progress toward one).

PHYSICAL REQUIREMENTS/WORK ENVIRONMENT

Physical Requirements Required to sit or stand, bend, type and reach while performing daily functions. Daily work with office equipment and materials. Work Environment The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is sitting at a desk or standing to perform other tasks. *This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. #J-18808-Ljbffr Mirion