Systems Engineer with Security Clearance

Overview Position Title: Systems Engineer Location: Annapolis Junction, MD Reports To: Program Manager; Team Lead Job Type: Full-time Clearance Requirement: Active TS/SCI with Polygraph Summary: As a Systems Engineer you serve as a core technical authority bridging high-level cryptographic mission requirements with secure engineering execution. Working within cryptographic development and production environments, you will design, integrate, test, and sustain modernized IT infrastructure and software platforms dedicated to an exclusive customer mission. You will apply system-of-systems engineering, DevSecOps principles, and Scaled Agile Framework (SAFe) methodologies to transition legacy client-server architectures into modular, microservices-based containerized environments.

Key Responsibilities

• Engineer, integrate, and sustain government-owned IT infrastructure and platforms in compliance with Risk Management Framework (RMF) guidelines.
• Lead system architecture refactoring from legacy client-server systems into modular microservices executing within Kubernetes (TKG/OpenShift) enclaves.
• Interface system platforms with high-assurance cryptographic equipment, Hardware Security Modules (HSMs), key management devices, Public Key Infrastructure (PKI), and external randomizers.
• Formulate and manage System Security Plans (SSPs), Data Flow Diagrams, COOP plans, and security controls to maintain continuous Authority to Operate (ATO).
• Implement DevSecOps CI/CD pipeline automation (GitLab CI, Docker, Kubernetes) with embedded security gates, static analysis, and zero-defect validation protocols.
• Enforce Infrastructure as Code (IaC) configuration management and automated drift remediation using capabilities such as Ansible and Packer.
• Participate in SAFe Program Increment (PI) planning, sprint execution, and cross-functional Agile Release Trains (ART).

Qualifications Education

• Bachelors degree in a Technical or related discipline is preferred.
• 4 years of additional experience may be substituted for a bachelors degree.

Experience

• SE1: 5+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.
• SE2: 10+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.
• SE3: 15+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.

Certifications

• DoD 8570.01-M / DoD 8140 Information Assurance Technical (IAT) Level II or III baseline certification (e.g., Security+ CE, CASP+ CE, or CISSP) preferred
• Certified Kubernetes Administrator (CKA), SAFe Agilist, or equivalent advanced certifications are strongly preferred Skills:
• Cryptographic Systems & High-Assurance Security: Advanced proficiency in cryptographic key lifecycle management, FIPS 140-2/3 standards, PKI, Key Management Infrastructure (KMI) concepts, zeroization workflows, and secure boundary enforcement.
• DevSecOps & Agile Methodologies: Proven hands-on experience in GitLab CI/CD pipeline automation, containerization (Docker, Podman), container orchestration (Kubernetes, OpenShift, Tanzu), and active participation in SAFe ceremonies.
• Infrastructure as Code & Security Automation: Experience with VMware vSphere/Horizon platforms, Infrastructure as Code (Ansible, Packer), system hardening (DISA STIGs, CIS Benchmarks), and continuous observability stacks (ELK, Grafana).

Physical Requirements

• Standard office environment with occasional requirements to visit client sites, labs, or field environments. Why Join Us?
• Impactful Work: Contribute to critical national security initiatives and make a real difference in protecting our nation.
• Cutting-Edge Technology: Work with the latest advancements in SIGINT and related fields.
• Career Growth: Opportunities for professional development, training, and advancement within a growing company.
• Collaborative Environment: Join a team of highly skilled and supportive engineers who are passionate about their work.
• Comprehensive Benefits: Competitive salary, generous PTO, health/dental/vision insurance, 401K matching, tuition reimbursement.

Compensation and Benefits

• Competitive Pay: Salaries depend on labor category, years of experience, education, skills relevant to the position, and type of contract.
• Benefits: Including Paid Time Off; 401K Contribution and Employer Match Contributions; and Medical, Dental, and Vision Coverage.
• For the full list of LufCo Benefits, visit our website: https://www.lufburrow.com/careers Position availability can vary due to dynamic, evolving contract needs.

This job posting being active does not guarantee an immediately available position matching its description. This job description is intended to provide a general overview of the responsibilities and qualifications for this position. It is not an exhaustive list and may be subject to change based on the needs of the company. LufCo provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

LufCo Employees: This position qualifies for up to a Purple Award level referral bonus. For more information, visit the Employee Portal. #CJ