Senior Cybersecurity Engineer

Own end-to-end delivery of secure command-and-control cybersecurity engineering for critical infrastructure systems within a Standard V-Model framework.

Responsibilities

• Translate customer cybersecurity needs into traceable system-level and component-level specifications using the Standard V-Model, in collaboration with Project Engineering Leads.
• Contribute to engineering cost estimates from project requirements and communicate requirements-related issues and risks to program leadership and customers.
• Design cybersecurity architectures for AIM SCS and COTS-based command-and-control solutions, including:
  • Network segmentation, access control, encryption, secure communications
  • Integration of physical security subsystems
• Ensure design decisions are traceable to applicable NEI 08-09 and CIS benchmark controls.
• Architect platform environments of 20–30 Windows servers and workstations within an Active Directory domain, including:
  • Group Policy-based security controls
  • Virtualized cluster layouts
  • Storage systems
  • Linux-based security appliances
  • Network switches and firewalls
• Produce and maintain design documentation with full traceability to system requirements, including:
  • Virtual and network design plans
  • Network architecture diagrams
  • Configuration specifications
  • Cybersecurity control mapping matrices
• Stand up, configure, and deliver 20–30 servers and workstations in Active Directory environments.
• Perform server and network deployment across the product delivery lifecycle to prioritize deliverables, validate feature sets, and maintain schedule and budget alignment.
• Integrate COTS solutions using system hardening, vulnerability analysis, documentation, and patching.
• Diagnose and resolve integration issues using systematic analysis, creative problem-solving, and documented resolution paths.
• Maintain configuration management records throughout the build, documenting decisions, changes, and deviations for a complete audit trail.
• Verify product feature sets to confirm functional and cybersecurity capabilities meet acceptance criteria prior to formal test completion.
• Collaborate on development and execution of cybersecurity test procedures mapped through a Requirements Traceability Matrix (RTM), validating compliance at both component and system levels.
• Support Acceptance Testing, including vulnerability assessments and security scans, with dispositioning of findings.
• Support onsite deployment at customer sites: physical installation, network commissioning, Active Directory integration, and system configuration per site-specific cybersecurity commissioning procedures.
• Conduct Site Acceptance Testing (SAT) with customer security, IT/OT, and operations staff to resolve integration challenges in real time and communicate status, test results, and dispositions to stakeholders.
• Train facility personnel on system operation, cybersecurity maintenance, and configuration management practices; deliver turnover packages.
• Travel up to 25%.
• Drive continuous improvement by capturing lessons learned after each delivery and updating design standards, integration procedures, and test methodologies.
• Mentor junior engineers and serve as a technical point of contact for direct customer communications.
• Other duties as required.

Requirements

• Bachelor’s degree in Cybersecurity, Systems Engineering, Computer Science, Electrical Engineering, Information Technology, or related discipline.
• 5 to 7 years of hands-on experience.
• Strong verbal and written communication skills, including ability to produce formal engineering documentation and present technical content to multiple audiences.
• Knowledge of engineering methodologies.
• U.S. citizenship or permanent resident status required.
• Ability to obtain site access credentials at nuclear power plants and government facilities.

Technologies

• Standard V-Model
• NEI 08-09
• CIS benchmark controls
• AIM SCS
• COTS
• Windows servers, Windows workstations
• Active Directory, Group Policy
• Virtualized cluster layouts
• Linux-based security appliances
• Network switches, firewalls
• Requirements Traceability Matrix (RTM)
• NIST SP 800-82, NIST SP 800-53
• IEC 62443
• NRC 10 CFR 73.54

Preferred

• Experience in project-based work with requirements-driven deliverables.
• Networking protocols and small to mid-sized network design.
• Virtualized clusters.
• Direct experience delivering systems in nuclear power, defense, or other NRC/DOE/DOD-regulated environments, including familiarity with nuclear communications systems and terminology, and NRC 10 CFR 73.54 compliance processes.
• CISSP or equivalent certification; GICSP, Security+, or CASP+.
• Familiarity with NIST SP 800-82, NIST SP 800-53, and IEC 62443 for industrial and critical infrastructure cybersecurity.

Work Location and Type

• Contract
• Onsite: Carrollton, TX

Work Environment / Physical Requirements

• Required to sit or stand, bend, type, and reach while performing daily functions.
• Daily work with office equipment and materials.
• During duties, employee sits at a desk or stands to perform other tasks.

Work environment descriptions and essential-function duties may vary; reasonable accommodation may be made for individuals with disabilities.