BAE Systems is looking for a DevSecOps and Cyber Engineer. This individual will support the transitioning of a prototype Wargaming System into a Production environment.
This is a truly exciting opportunity to work with a broad technical team consisting of expertise in Systems Engineering, Modeling and Simulation, Software Development and Integration, DevSecOps, Data Management, Predictive Analytics, multi-cloud engineering, Artificial Intelligence and Machine Learning.
The individual will be tasked with supporting the migration of a prototype wargaming system comprised of multiple applications from AWS to Azure in IL4, IL5 and IL6 security enclaves. The successful candidate will maintain the multiple instances of the solution across development, test and production environments. This position will be part of a team responsible for supporting installation, cyber-hardening, performance and cyber testing, and production system support for the wargaming system.

The position is a combination of Cybersecurity and Azure cloud administration, tasks include:

• Supporting adherence to all aspects of a rigorous Risk Management Framework (RMF) compliance program as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs and associated NIST publications

• Work closely with the development and integration teams to ensure stability and hardening of the system throughout the development and production lifecycle

• Support and maintain Authority to Operate approvals on NIPR and SIPR for various systems by adhering to the RMF

• Enforcement of System Security Plans, Plans of Action and Milestones (POA&Ms), assessing and auditing systems security controls.

• Developing and maintaining all security documentation to include the System Security Plan, Security Controls Tractability Matrix, POA&Ms, STIG Compliance Assessments, and any other security related documentation.

Work Location:
Duties expected to be performed at the BAE Systems Facility known as Dulles North located in Sterling, Virginia. Support may also be required at the customer facility located in Quantico Virginia.
Alternate work locations must be agreed to in writing by BAE Systems at time of hire and is subject to change due to contract requirements.

• IAM Level I certification commensurate with DoD 8570.1M requirements (or ability to obtain certification within 6 months)
• Experience with vulnerability scanning solutions
• Knowledge of security hardening of OS and POAM work off
• Strong trouble-shooting skills and the persistence to resolve issues
• Hands-on experience with Infrastructure as Code (IaC)/Infrastructure as a Service (IaaS), developing scripts to automatically provision, configure, deploy tools/software using modern scripting languages.
• Familiarity with classified systems administration, firewalling and networking
• Containerization and orchestration technologies (such as Docker, Kubernetes).
• Infrastructure as code technologies (such as Bicep, Ansible).
• Cloud computing experience with AWS and/or Azure
• Customer focused excellent communicator and ability to work with limited supervision.
• Strong organizational skills
• Familiar with Azure Cloud Services and Azure Stack Hub
• Working knowledge of cloud security (i.e., AWS or Azure), DevSecOps, operating systems (Windows and Linux), web security, DoD HBSS security services, and micro services.
• Demonstrated experience in managing Cloud utilization, technical troubleshooting and problem-solving
• Experience administering, maintaining, configuring and troubleshooting Linux and/or Windows server OS and related applications