Workstation Systems Engineer

Description

The team runs a classified secure workstation enclave for a customer, and this role helps shape how that enclave is designed, built and operated so users get secure, reliable and compliant access to mission-critical systems.

This is a senior principal role in the IT Infrastructure and Operations job family, based onsite in McLean, Virginia.

The company is a global technology and professional services firm serving major US government agencies, defense and the intelligence community. About 26,000 staff in more than 50 countries work on AI, cloud, cyber and software development.

Responsibilities

• Own the architecture, engineering and daily operation of the classified workstation enclave, including Active Directory and GPOs, with a focus on integrity, security and performance.
• Use Active Directory, GPOs and MECM, along with identity and access management, configuration and change management, and vulnerability management, to build and maintain standard secure workstation configurations.
• Work with the Engineering Lead, other engineers, cybersecurity staff and stakeholders to design, configure and sustain workstation services that meet strict security and operational needs.
• Review system and process architectures, then recommend products and write test plans and technical briefings.
• Keep engineering procedures, artifacts and playbooks for the enclave and core security controls current.
• Support Continuous Monitoring (ConMon) validation and help prepare for and carry out the annual security assessment.

Requirements

• Bachelor of Arts or Bachelor of Science degree.
• 10+ years of related experience.
• Hands-on engineering skill with Active Directory and GPOs in workstation environments.
• Systems architecture experience.
• Knowledge of Microsoft Endpoint Configuration Manager (MECM).
• Experience supporting secure workstation enclaves.
• Experience maintaining System Security Plans (SSPs), ConMon packages and audit or assessment documentation.
• Familiarity with DoW or federal cybersecurity frameworks.
• CompTIA Security+ CE or an equivalent certification, to meet DoW 8140 / 8570.01-M compliance.
• Preferred: hands-on engineering expertise with MECM.

Conditions

Onsite in McLean, Virginia, USA, with no telecommuting option.

40 scheduled hours per week.

Travel of less than 10%.

US citizenship is required.

You must currently hold an active Top Secret clearance and be able to obtain Top Secret/SCI. No public trust clearance is required.

This is a regular requisition.

The likely salary range is $157,250 to $212,750. This is not a guarantee, as pay is set by experience, geographic location and possibly contract requirements, and may fall outside this range.

As part of hiring, you will complete an identity verification process using biometrics and AI. You must be on camera for virtual interviews, and your picture may be taken to verify your identity. By proceeding, you authorize the collection, processing and use of your biometric data for identity verification and security.

The company is an equal opportunity employer that welcomes individuals with disabilities and protected veterans.

Benefits

• Medical plan options, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) with pre-tax and post-tax contributions up to IRS limits and a company match.
• Full flex work weeks where possible.
• Paid time off including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance, provided or available.
• An AI-powered career tool that suggests career steps and learning opportunities.
• An internal mobility team to help you reach your career goals.
• Competitive pay and a military-friendly workplace.