Systems Engineer

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

The successful candidate works on high-visibility or mission critical aspects of a given program and performs all functional duties independently; oversees the efforts of less senior staff and/or is responsible for the efforts of all staff assigned to a specific job. 

This position is Monday through Friday, normal business hours.  However, employee may be required to provide after-hours and weekend support during planned or emergency events. 

• Conduct continuous technology assessments and market surveys to identify COTS and GOTS solutions applicable to modernization requirements.
• Conduct Analyses of Alternatives (AoA) that evaluate candidate systems for security posture, SWaP advantages, and operational suitability at the tactical edge, documenting trade-off analyses and recommendations.
• Develop and present Design COAs to the Government for review and selection, documenting trade-off analyses and recommendations.
• Develop and document both Physical Infrastructure Architecture Diagrams and Logical Software Architecture Diagrams that satisfy validated requirements.  Diagrams shall define each interface’s distant-end connection, delineate the contractor’s and Government’s respective points of responsibility, and support continuous feedback. Integration points shall be captured in Interface Control Documents.
• Maintain design documentation in a Government-approved repository and update it IAW the configuration management process.
• Coordinate with leads to ensure functional designs align with operational concepts and mission requirements.
• Develop and maintain physical and logical design documentation for all systems within scope.
• Produce and manage ICDs or equivalent interface specifications for all integration points between systems and external interfaces.
• Update design documentation and interface specifications of any approved design change.
• Ensure all design artifacts are version-controlled and maintained in the Government-approved configuration management tool.
• Implement security controls IAW applicable NIST publications, DODI 8500.01, DODI 8510.01
• Assess and document security control implementation at each sprint boundary and MVP release gate.
• Deliver and integrate NetSecOps platforms as directed by the Government, prioritizing configuration of existing enterprise tools over custom development.
• Provide cybersecurity expertise to support the integration and validation of new capabilities within a laboratory environment.

• BA/BS degree

• Ten (10) years or more experience.

• One of these IAT Level II certifications: CompTIA Security + CE, CECCNA-Security, CySA+ **, GICSP, GSEC, CND, SSCP.

• A Computing Environment (CE) certification or certificate for the technical area of responsibility in either Network support/defense (e.g., Splunk, Cisco, McAfee, etc.) OR (e.g., Microsoft, Linux, Solaris, etc.).

• Must possess competencies in installation, service design, and support in an environment that uses Microsoft Windows Server 2012/2016.

• Experience with Azure or AWS Cloud Environments.

• Experience with Linux.

• Conceptual knowledge of Storage systems (SAN/NAS).

• Working knowledge of authentication functions and protocols such as LDAP, Kerberos, and Active Directory.

• Experience with production environments.

• Must be able to work independently and as part of a team.

• Must be available to participate in on-call work on a reoccurring basis.

• Solid troubleshooting skills and demonstrated ability of end-to-end problem management and ownership.

• Excellent written and oral communication skills.

• MA/MS.
• DoD TS/SCI clearance.
• ITILv4 Foundations certification.
• One of the IAM Level II certifications: CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, HCISPP.

• Any of the following IT certifications are also desirable for this position: MCP, CompTIA A+ / Network+ / Security+, AWS, Azure.

• DoD Secret clearance or higher.