Sr Systems Security Engineer / Sr. Core Applications Administrat with Security Clearance

The ISR (Intelligence, Surveillance & Reconnaissance), Aviation, and Security (IAS) business area is a leader in ISR and aviation, it is a leading prime manned and unmanned aircraft systems integrator for innovative, high-performance ISR and aviation systems. Its end-to-end Command, Control, Computers, Communications and Intelligence, Surveillance & Reconnaissance (C4ISR) capabilities encompass design, integration, test, certification, ground/flight training and complete logistics support. IAS tailors solutions to customer cost, performance, and schedule requirements and designs to consistently exceed expectations - with an unrivaled record of on time and on (or under) budget deliveries. SNC has led thoughtful and disruptive change in the aerospace and defense industry for the past 60 years and now, we're applying this tenacity and expertise to the U.S. Air Force's (USAF) Survivable Airborne Operations Center (SAOC) mission. Join the SNC-led SAOC team and be a part of exciting and meaningful work to modernize and deliver the next-generation SAOC aircraft trusted by the President, Secretary of Defense and Chairs of the Joint Chiefs of Staff to ensure continued critical command, control and communication during national emergencies. If you're passionate about building the airborne command post of the future, consider SNC for your next mission. Learn more about NC3 and SAOC here . If you like solving complex IT and security problems using your deep analytical skills, this is the opportunity for you! As a Senior Systems Security Engineer, you will lead the design and implementation of our security infrastructure. You will manage complex security projects, provide strategic direction for security practices, and mentor junior engineers. Responsibilities: Application Administration - Backend & Frontend * Manage the full application lifecycle for critical engineering and DevOps platform applications - installation, configuration, patching, version upgrades, and retirement across RHEL/Linux environments.
* Administer backend application server infrastructure including Apache Tomcat, JBoss/WildFly, or equivalent Java EE application servers - including heap tuning, connection pool management, and log configuration.
* Manage frontend application delivery including web server configuration (Apache HTTPD, Nginx), reverse proxy setup, SSL/TLS certificate management, and load balancer integration.
* Develop and maintain application configuration baselines - version-controlled configuration files, environment-specific parameter management, and configuration drift detection.
* Execute application patching and update cycles in alignment with program change management processes - including pre-patch testing, rollback planning, and post-patch validation.
* Monitor application health, performance, and availability using platform-specific monitoring tools and enterprise monitoring solutions - proactively identify and resolve performance degradation before it impacts users.
* Maintain application licensing compliance - track license utilization, manage license server configurations, and coordinate renewals and procurement with program management.
RHEL / Linux Systems Administration * Administer Red Hat Enterprise Linux (RHEL) and/or CentOS/Rocky Linux environments supporting engineering application workloads - including system installation, hardening, user management, and package management (RPM/YUM/DNF).
* Manage Linux system services, startup configurations (systemd), file system management, and storage mount points for application data and log directories.
* Implement and maintain RHEL DISA STIG hardening - apply security controls, manage firewall rules (firewalld/iptables), configure SELinux policies, and provide STIG compliance evidence for ATO/RMF packages.
* Perform Linux performance tuning for application workloads - kernel parameter optimization, I/O scheduling, network stack tuning, and memory management.
* Develop shell scripts (Bash) and automation for routine administration tasks - log rotation, health checks, backup execution, user provisioning, and configuration validation.
* Manage LDAP/Active Directory integration for Linux-hosted applications - configure Kerberos authentication, PAM modules, and SSSD for centralized identity management.
JFrog / Artifactory Administration * Install, configure, and administer JFrog Artifactory as the program's enterprise artifact repository - including repository configuration (local, remote, virtual), user and group management, permission targets, and access federation.
* Manage artifact lifecycle policies - retention rules, cleanup policies, storage quota management, and artifact promotion workflows across development, staging, and production repositories.
* Configure Artifactory integration with CI/CD pipelines - GitLab CI, Jenkins, or equivalent - ensuring artifact publish, resolve, and promotion workflows function reliably across the DevSecOps pipeline.
* Implement and maintain software supply chain security controls in Artifactory - Xray integration for vulnerability scanning, license compliance enforcement, and malicious package detection on inbound dependencies.
* Manage Artifactory high availability configurations, backup and restore procedures, and database backend maintenance (PostgreSQL or equivalent).
* Administer JFrog Distribution or JFrog Pipelines if in scope - coordinate artifact distribution to downstream environments including air-gapped or classified network segments.
GitLab / GitHub Administration * Administer GitLab self-managed or GitLab.com instances - including installation and upgrades, runner configuration and management, group and project structure governance, and user access control (RBAC).
* Configure and maintain GitLab CI/CD pipeline infrastructure - shared runners, specific runners, runner scaling, and pipeline security controls including protected branches and approval rules.
* Administer GitHub Enterprise or GitHub.com organization settings - repository management, team and permission structures, branch protection rules, Actions workflow governance, and security policy enforcement.
* Implement GitLab/GitHub security hardening - audit log management, secret scanning, dependency scanning, SAST integration, and compliance framework configuration.
* Manage GitLab/GitHub high availability, backup, and disaster recovery procedures - including Gitaly cluster management, object storage configuration, and restore testing.
* Support migration and consolidation of repositories between platforms or instances - including history preservation, permission mapping, and CI/CD pipeline migration.
3DEXPERIENCE (3DX) Platform Administration * Maintain and administer the Dassault Systemes 3DEXPERIENCE (3DX) platform - including server configuration, service management, database backend administration, and user provisioning.
* Ensure 3DX data continuity and model integrity - manage collaborative spaces, platform backups, data restoration procedures, and version control for engineering models and assemblies.
* Perform 3DX platform upgrades, hotfix application, and patch management in alignment with program change management processes and Dassault Systemes maintenance windows.
* Configure 3DX roles, masks, and access control - manage user licenses, application roles (CATIA, ENOVIA, SIMULIA, DELMIA), and collaborative space permissions aligned with program authorization requirements.
* Administer 3DX integration touchpoints - manage connections between 3DX and adjacent engineering tools (Cameo, Jama, Teamcenter) including API configurations, data exchange pipelines, and synchronization workflows.
* Monitor 3DX platform performance, session management, and database health - identify and resolve bottlenecks that impact engineering team productivity.
* Support ATO/RMF activities for 3DX - apply applicable DISA STIGs or STIG-adjacent security controls for application and database layers and provide compliance documentation.
Cameo Systems Modeler Administration * Configure and optimize Cameo Systems Modeler (No Magic / Dassault Systemes) for complex systems engineering modeling environments - including server-side Teamwork Cloud (TWC) administration and client deployment management.
* Administer Cameo Teamwork Cloud - manage projects, user access, branching and merging workflows, and model backup and restoration procedures.
* Manage Cameo license server configuration - Flexera/FlexLM or equivalent - including license allocation, concurrent usage monitoring, and license file updates.
* Configure Cameo integration with 3DX, Jama, and other engineering tools - establish and maintain data bridges, synchronization adapters, and API connections that enable cross-tool traceability.
* Support Cameo version upgrades and migration of model repositories - including compatibility testing, migration procedure development, and rollback planning.
* Provide Tier 2/3 technical support for Cameo modeling environment issues - profile configuration problems, plugin conflicts, TWC connectivity issues, and model integrity failures.
Jama Connect / TWC Requirements Management Administration * Administer Jama Connect requirements management platform - including server administration, database backend management, user and group provisioning, and project configuration.
* Manage Jama Connect upgrades, patches, and backup/restore procedures - ensure availability and data integrity of requirements traceability data across program projects.
* Configure Jama Connect integrations - establish and maintain synchronization connections with Cameo Systems Modeler, Teamcenter, GitLab/Jira, and other downstream tools to ensure end-to-end requirements traceability.
* Administer Teamcenter Workflow and Configuration (TWC) components - manage workflow templates, access controls, and configuration management processes that support program baseline management.
* Maintain Jama and Teamcenter API configurations and integra