Group Policy Objects Cybersecurity Jobs

1 job found

Today

BAE Systems Inc. Rockville, MD

Rockville, MD

Today

$118k - $201k/yr Full time Cybersecurity Operations Data Security Disa Stigs

BAE Systems Inc. is hiring an on-site Principal IT Systems Security Engineer for the IT Operations Team in Rockville, MD.

Operate, maintain, and dispose of Information Systems (IS) in alignment with approved security policies and practices
Perform automated and manual system assessments to verify compliance with DISA STIGs and SCAP tooling
Develop and administer Windows operating system environments
Maintain and configure Active Directory (AD) environments, including structures and configuration
Develop and apply Group Policy Objects (GPOs) for standalone and networked information systems
Ensure system security measures align with applicable government and organizational policies, including:
- NIST SP 800-37 (RMF)
- NIST SP 800-53
- NIST SP 800-171
- CMMC
- Internal standards
Support ISSO/ISSM activities by creating and reviewing System Security Plans (SSPs) for IS accreditation
Configure and maintain system backups to support data recovery
Automate tasks using scripting technologies
Configure systems and networks to use Public Key Infrastructure (PKI)
Identify, monitor, and remediate IS Plan of Action and Milestones (POA&Ms)
Develop and maintain Windows Servers, Windows Workstations, and Linux systems supporting the IS lifecycle
Implement and review information system backups according to system policy documentation
Maintain endpoint security posture to help ensure information system protection
Support Assessment and Authorization and other security testing or review events to reach accreditation milestones

CompTIA Security+ or equivalent approved 8570/8140 IAT level 2 certification, or ability to obtain within 6 months of hire
Bachelor’s Degree (typically Computer Science, Information Technology, or similar) plus 6 years of relevant work experience
Working understanding of NIST SP 800-53 controls, including determining applicable controls and documenting implementation
Strong troubleshooting skills and ability to research and find technical solutions with minimal supervision
Effective organizational, time management, and communication skills (written and verbal)
Proven experience maintaining secure networks
Previous systems administration and/or System Security Engineer experience

Ability to harden applications and systems per DISA Security Technical Implementation Guides (STIGs)
Ability to understand and remediate vulnerabilities identified by IVAMs, ACAS, and STIGs
Experience administering Trellix Host Based Security System (HBSS) ePolicy Orchestrator (ePO) and Assured Compliance Assessment Solution (ACAS)
Experience with VMware and Hyper-V virtualization technologies
Working knowledge of Linux Operating Systems
Strong knowledge of Active Directory, DNS, DHCP, and deploying security policies via group policy
Experience deploying and maintaining Public Key Infrastructure (PKI)
Experience deploying and maintaining zero trust architecture
Ability to configure log forwarding, ingestion pipelines, and dashboards in Splunk
Ability to identify anomalies, investigate alerts, and support remediation based on Splunk analysis

Health, dental, and vision insurance
Health savings accounts
401(k) savings plan
Disability coverage
Life and accident insurance
Employee assistance program
Legal plan
Paid time off
Paid holidays
Paid parental, military, bereavement, and any applicable federal and state sick leave
Employee recognition program to receive monetary or non-monetary recognition awards

Compensation: USD 118,095 - 200,762 per year

Location: Rockville, MD (onsite)

New Group Policy Objects Cybersecurity Jobs, daily.