Principal IT Systems Security Engineer

Job Description
BAE Systems is seeking an ON-SITE Principal IT Systems Security Engineer. Join our IT Operations Team and become a member of a highly productive team, where each employee has the opportunity to grow their skills and work on rewarding system and network operations projects. The selected candidate will perform the following functions:

• Ensure Information Systems (IS) are operated, maintained, and disposed of in accordance with approved security policies and practices
• Conducting automated and manual system assessments to validate system compliance with DISA Security Technical Information Guidelines (STIGs) and Security Content Automation Protocol (SCAP) tool
• Develop and administer Windows operating system environments
• Maintain and configure Active Directory (AD) environments and structures
• Develop and apply Group Policy Objects (GPOs) to standalone and networked information systems
• Ensuring system security measures comply with applicable government policies (NIST SP 800-37 (RMF), NIST SP 800-53, NIST SP 800-171, CMMC, and internal standards)
• Assisting the ISSO/ISSM with the creation and review of System Security Plans (SSPs) for IS accreditation
• Configure and maintain system backups to ensure data recovery
• Automate tasks using various scripting technologies
• Configure systems and networks to utilize Public Key Infrastructure (PKI)
• Identifying, monitoring, and resolving any IS Plan of Action and Milestones (POA&Ms)
• Develop and maintain Windows Servers, Workstations, and Linux systems in support of the IS lifecycle
• Implement and review information system backups according to system policy documentation
• Maintain a strong endpoint security posture to ensure information system protection
• Supporting Assessment and Authorization and other security test events or reviews to achieve accreditation milestones

#LI-VW1
#LI-Hybrid
About BAE Systems and the U.S. Navy's Strategic Systems Programs (SSP)
Our organization has supported the U.S. Navy's Strategic Systems Programs (SSP) continually since the programs inception in the 1950s. SSP developed the first sea-based, underwater-launched Strategic Weapon System (SWS), a defense system that is truly critical to our national security. For more than six decades, SSP has maintained and upgraded this weapon system and we have been there every step of the way. The sea-based SWS is the ultimate stealthy weapon system and is the first leg of the U.S. nuclear triad. With over 70% of our nation's nuclear arsenal its importance to maintaining world peace cannot be overstated. The development of Columbia, the most advanced nuclear-powered, nuclear-armed submarine ever designed, as well the next D5LE2 weapon system is under way and will begin to be rolled out over the next decade. The Navy projects this system to be operational through 2084, meaning the program will have a total life span of more than 120 years. This is a unique program and BAE Systems employees on this program understand they are part of an important legacy.
As a decades long sole source partner on multiple contracts on behalf of our customer, our program has remarkable stability and is concurrently experiencing significant growth. Combined, these factors provide ample opportunity for professional growth and development for capable and talented individuals on our team.
BAE Systems, Inc. is the wholly owned U.S. subsidiary of BAE Systems plc.
BAE Systems plc provides some of the world's most advanced, technology-led defense, aerospace, and security solutions. As one of the top ten defense contractors, we employ a skilled workforce of around 100,000 people in more than 40 countries. We develop, engineer, manufacture, and support products and systems to protect national security and keep people safe.
Required Education, Experience, & Skills

• A CompTIA Security + or equivalent 8570/8140 approved IAT level 2 certification or ability to obtain within 6 months of being hired
• Bachelor's Degree (typically within the field of Computer Science, Information Technology, or similar field) and 6 years of relevant work experience
• Maintaining a thorough understanding of NIST 800-53 controls and determining which controls are applicable, as well as documenting the implementation
• Must have strong troubleshooting skills and the ability to research and find technical solutions with minimal supervision
• Effective organizational, time management, and communication skills (written and verbal)
• Proven experience in maintaining secure networks
• Previous experience as a systems administrator and/or System Security Engineer

Preferred Education, Experience, & Skills

• The ability to harden applications and systems in accordance with DISA's Security Technical Implementation Guides (STIGs)
• The ability to understand and remediate vulnerabilities identified by IVAMs, ACAS, and STIGs
• Experience in administering Trellix Host Based Security System (HBSS) ePolicy Orchestrator (ePO) and Assured Compliance Assessment Solution (ACAS) systems
• Have experience with VMWare and Hyper-V virtualization technologies
• Working knowledge of Linux Operating Systems
• Strong Knowledge of Active Directory, DNS, DHCP and deploying security policies via group policy
• Experience with deploying and maintaining Public Key Infrastructure (PKI)
• Experience with deploying and maintaining zero trust architecture
• Experience configuring log forwarding, ingestion pipelines, and dashboards within Splunk
• Ability to identify anomalies, investigate alerts, and support remediation based on Splunk analysis

Pay Information
Full-Time Salary Range: $118095 - $200762
Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.
Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.
About BAE Systems, Inc.
BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support.
Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters.
This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.