Scientist – Cyber Infrastructure Systems Engineer Secret

Job Title:  Senior Cyber Infrastructure Systems Engineer  

Job Code:  27322

Job Location:  Colorado Springs, CO

Job Schedule: 9/80

Job Description:

Performs technical planning, system integration, verification and validation, cost and risk and supportability and effectiveness analyses for total systems. Analyses are performed at all levels of total system product to include: concept, design, fabrication, test, installation, operation, maintenance and disposal. Ensures the logical and systematic conversion of customer or product requirements into total systems solutions that acknowledge technical, schedule and cost constraints. Performs functional analysis, timeline analysis, detail trade studies, requirements allocation and interface definition studies to translate customer requirements into hardware and software specifications. 

Specific to this position: Seeking a Senior Cyber Infrastructure Systems Engineer to provide technical leadership and subject matter expertise to the MOSSAIC portfolio of systems in Colorado Springs.

The successful candidate will have:Depth of knowledge in Systems Administration/IT Architecture, as demonstrated during program execution, R&D efforts or business pursuits

• Breadth of knowledge as demonstrated in development of system level solutions, requiring expertise in more than one technology domain or across technology areas
• Lead Information Technology (IT) efforts for a program, R&D effort or business pursuit that results in business growth
• Implemented/operationalized technical road maps to meet business goals
• Demonstrated thought-leadership for technical solutions
• Established direction for new processes or solutions
• Collaborated to achieve business success
• Achieved customer recognition for their contribution

Essential Functions: 

• 8-10 years of experience with Red Hat Linux Administration or Engineering, 6-8 years of experience with Windows Administration or Engineering
• Provide Risk Management Framework (RMF) technical leadership for development teams of new multi-discipline (mechanical, electrical, software, RF, etc.) products.  
• Support vulnerability assessment activities as required.
• Must be able to work individually and lead, providing direction based on program and customer requirements and compliance.
• Possess ability to conduct research on security and other applicable topics as needed as the cybersecurity lead.
• Must be a self-starter that is able to understand requirements and develop plans and articulate needs to meet compliance and requirements.
• Moderate understanding of vulnerability analysis tools such Tenable NESSUS Security products and the vulnerability/patch management process. 
• Experience in the content development and administration of SEIM/audit reduction tools (e.g., Splunk). 
• Supporting account management, PKI cert management, LDAP configuration / management. 
• Scripting experience (Bash/Shell, Python, Perl, PowerShell). 
• Experience with the management and keying of High Assurance Internet Protocol Encryptors (HAIPE)
• Experience with the management of COMSEC Data Transfer Devices (e.g. High Assurance Internet Protocol Encryptor)
• Foundational knowledge of Layer 3 architecture and diagramming within Visio (or equivalent).
• Experience in routing and switching as employed in telecommunications and network traffic.
• Capable of supporting management of VLANs, VRF, virtual switching, multi-layer switching, Multi-layer Firewalls, ACLs, secure configuration, bulk link encryption (KGs).
• Recognized as an internal expert and thought leader in area of expertise with broad experience across multiple job areas.
• Recommends tactics and strategies that will directly impact the achievement of overall business and/or or functional results
• Experience with Engineering Change Proposals (ECPs), Basis of Estimate (BOE) generation and associated efforts to find and win new contract work
• Interface with cross-functional disciplines to provide expert consultation in your discipline with ability to understand/relate other engineering disciplines in support of overall engineering efforts.
• Expected to contribute to Product or Network Information Security Engineering activities pertaining to CDRLs, trade studies, security requirements analysis, secure architecture development, management & compliance with security controls, design review milestones (SRR, SDR, PDR, CDR) and security test/verification activities.  
• Responsible for developing security overlays, data flow diagrams, internal requirements, CONOPs and interface control documents from customer / product requirements. 
• Possess mastery of VMWare products and virtualization architectures
• System configuration experience with Enterprise Identity Management tools (LDAP, IPA, Active Directory, etc.)
• Lead efforts to field changes to production systems to a schedule
• Address and detect issues that impact projects and implement/develop courses of action (COAs) to mitigate or alleviate the impact to projects
• Support critical operations during standard and occasional non-standard working hours
• Ability to travel up to 10% 
• This position is performed 100% onsite and cannot be performed remotely.

Qualifications:

• Education:
  • Bachelor’s Degree and minimum 12 years of prior relevant experience.
  • Graduate Degree and a minimum of 10 years of prior related experience.
  • In lieu of a degree, minimum of 16 years of prior related experience.
• Secret clearance is required. 
• DOD 8570.01M IAT 2 certification.

Preferred Additional Skills:

• DoD 8570.01-M IAT Level 3 certification (e.g. CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, or GCIH).
• Experience with construction and configuration of data Cloud environments such as AWS or GovCloud using government software
• Working knowledge of RMF and cybersecurity requirements
• Previous experience supporting DoD/government customers
• Hardware/software requirement verification and or system validation experience
• Demonstrated ability to work and grow in a dynamic, fast paced, team-oriented environment
• Active TS/SCI DOD security clearance
• Experience with CM tools
• Establish and maintain up-to-date cybersecurity configurations based on DISA STIGs and IAVM Notices

In compliance with pay transparency requirements, the salary range for this role in Colorado State is $130,500 - $242,500. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, schedule type, and the applicability of collective bargaining agreements. The application window for this requisition is anticipated to close August 31, 2025.