Senior System Engineer

Belay Technologies has been voted Baltimore Business Journal's (BBJ) Best Places to Work 2019, runner up in 2020, and a finalist in 2021! Belay Technologies is seeking a System Engineer to join our intel team. The Zero Trust Identity, Credential, and Access Management (ICAM) System Engineer provides systems engineering, integration, testing, and deployment support for Department of Defense Zero Trust initiatives. The engineer will work with multiple ICAM product teams to integrate externally developed capabilities and support the development of internally developed services into a cohesive ICAM solution that can be deployed across diverse mission environments. The selected candidate will support the integration, configuration, validation, packaging, and release of ICAM capabilities, including identity services, policy decision services, access control components, and supporting infrastructure. Responsibilities include systems engineering, architecture development, technical assessments, requirements analysis, deployment package development, Kubernetes-based deployment support, software supply chain security activities, and release validation. This position serves as a technical bridge between ICAM product teams, software developers, cybersecurity engineers, test teams, and system integrators to ensure capabilities are properly integrated, tested, documented, and prepared for enterprise deployment. The engineer will help ensure delivered solutions align with Zero Trust principles, cybersecurity requirements, and operational deployment objectives. Responsibilities Include: Integrate externally developed ICAM capabilities and internally developed services into a unified Zero Trust ICAM solution. Support development, integration, configuration, and testing of ICAM capabilities including identity services, access management services, policy decision services, and supporting infrastructure components. Participate in requirements analysis, functional decomposition, system design, and architecture development activities. Develop and maintain architecture documentation, design products, deployment guides, release notes, user guides, implementation procedures, SOPs, and technical plans. Support development and maintenance of Kubernetes-based deployment packages and associated configuration artifacts used to deploy ICAM capabilities across multiple environments. Perform system integration, configuration validation, troubleshooting, and technical assessments of ICAM capabilities and supporting technologies. Conduct functional, integration, and operational testing to validate system performance and readiness for release. Support secure software integration and release activities, including artifact validation, vulnerability assessment, container security review, and deployment package integrity verification. Participate in software supply chain security activities supporting secure delivery and release of ICAM capabilities. Research emerging technologies, industry standards, federal policies, and DoD guidance to identify capability improvements and integration opportunities. Support risk assessments, security reviews, and mitigation planning activities associated with ICAM and Zero Trust initiatives. Collaborate with software development, cybersecurity, system administration, platform engineering, and test teams to establish capabilities that satisfy mission and security requirements. Support Agile development activities including sprint planning, backlog refinement, requirements discussions, and release planning. Develop technical recommendations and briefings for government and contractor leadership. Coordinate with system integrators and deployment stakeholders to support successful field implementation of delivered capabilities. Candidates should have the following qualifications: TS/SCI with polygraph is required. Bachelor’s Degree or higher in computer engineering or in a field related to the computer engineering or computer science disciplines 10 years of System Engineering experience. An additional 4+ years of System Engineering experience may be substituted for the degree for a total of 14 years. Candidates are required to have the following skills: Experience supporting systems engineering activities within federal, Department of Defense, Intelligence Community, or similarly regulated environments. Understanding of Identity, Credential, and Access Management (ICAM) concepts and Zero Trust Architecture principles. Experience supporting system integration, configuration, testing, validation, or deployment activities. Experience developing technical documentation including architecture products, design documents, deployment guides, implementation procedures, SOPs, or engineering plans. Knowledge of authentication, authorization, identity federation, access control, and policy enforcement concepts. Experience supporting requirements analysis, system design, architecture development, or engineering assessments. Candidates are desired to have the following skills: Experience supporting Zero Trust implementation initiatives. Experience with OAuth, OpenID Connect (OIDC), SAML, federation services, or Single Sign-On technologies. Experience with Identity Providers (IdP), Policy Administration Points (PAP), Policy Decision Points (PDP), Policy Enforcement Points (PEP), or related ICAM technologies. Familiarity with Public Key Infrastructure (PKI), certificate lifecycle management, and credential management solutions. Experience with Kubernetes, Helm, Docker, containerized applications, or cloud-native deployment architectures. Experience supporting deployment package development and release management activities. Familiarity with AWS, Azure, or other cloud environments supporting government workloads. Experience with REST APIs, JSON, XML, and system-to-system integrations. Experience with software supply chain security practices including vulnerability management, artifact validation, SBOMs, dependency analysis, container security, or release integrity verification. Experience with vulnerability assessment tools, security testing, STIG compliance reviews, or remediation tracking Experience supporting Assessment and Authorization (A&A) activities, SSP development, POA&M management, or NIST 800-53 compliance efforts. Familiarity with Agile development methodologies, Jira, and Confluence. Experience developing architecture diagrams, trust boundary diagrams, implementation roadmaps, or technical briefings. Knowledge of scalability, resiliency, and high-availability deployment architectures. Perks and Benefits: 8 weeks paid leave - 4 weeks of personal leave, 3 Yay! days, take off on your birthday,11 paid holidays and optional leave up to 6 days through Belay's volunteer program 10% matching in 401(k) contributions vested on day one $5,000 annual training/tuition Student Loan Repayment Program 100% company funded HSA Rich medical coverage (100% coinsurance) Dental coverage including orthodontia Up to $420,000 in life insurance, premiums 100% company funded Amazon Prime, gym reimbursement, monthly lunches, games and prizes Pet adoption program, generous referral bonus program, fun events, and more! At Belay, we are committed to creating an environment where you can thrive both professionally and personally. We believe in transparency and fairness in compensation. Several factors influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, education, specific skills and competencies and certifications. Belay offers a competitive total compensation package that includes benefits and perks, a flexible work-life balance, and career development. Salary Range: $168,000 to $240,000 Belay Technologies is a certified Service-Disabled Veteran Owned Small Business located in Columbia, Maryland (Baltimore/Washington area). Belay Technologies specializes in systems automation and full stack development. Belay Technologies provides leading technology and engineering solutions to the DoD, as well as state-of-the-art commercial products. We hire software engineers, web designers, test engineers, systems engineers, systems administrators, database engineers and other tech services. We are an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. Key words: Full Clearance, Fort Meade, SDVOSB, Service-disabled veteran owned small business, DoD, full scope