NIH - Lead Security Systems Engineer

Qualifications

• Public Trust Clearance
• B.S. in Computer Science, Information Technology, or a related field
• 10+ years of progressively responsible experience in systems engineering, infrastructure engineering, or cybersecurity engineering.
• Experience supporting large federal IT environments.
• Experience implementing Zero Trust Architecture.
• Experience supporting hybrid cloud environments.
• Experience designing secure enterprise infrastructure.
• Experience supporting FISMA and RMF compliance activities.

Duties

• Lead the engineering, implementation, and lifecycle management of enterprise security architectures supporting NIH mission systems.
• Provide technical leadership for security engineering initiatives across multiple operating environments.
• Develop secure architecture roadmaps supporting modernization and enterprise transformation initiatives.
• Review and approve engineering designs to ensure alignment with NIH cybersecurity standards.
• Engineer, implement, and maintain secure enterprise infrastructure supporting Windows, Linux, cloud, and hybrid environments.
• Lead system engineering efforts for enterprise servers, virtualization platforms, storage, identity infrastructure, and supporting technologies.
• Develop secure baseline configurations using federal cybersecurity guidance.
• Design resilient and highly available system architectures.
• Support enterprise configuration management and lifecycle management activities
• Lead implementation of NIH Zero Trust Architecture initiatives.
• Design identity-centric security architectures utilizing least privilege principles.
• Implement continuous authentication and authorization capabilities.
• Support micro-segmentation, software-defined perimeters, and secure access technologies.
• Develop Zero Trust implementation strategies aligned with NIST SP 800-207.
• Engineer enterprise security controls protecting systems, networks, applications, and cloud environments.
• Integrate cybersecurity technologies into existing NIH infrastructure.
• Develop secure engineering standards and technical implementation procedures.
• Conduct architecture reviews and security engineering assessments.
• Support technology refresh and modernization initiatives.
• Design secure cloud architectures supporting Azure, AWS, Microsoft 365, and hybrid environments.
• Implement cloud-native security controls.
• Support secure cloud migration initiatives.
• Engineer identity federation and secure cloud connectivity.
• Integrate cloud monitoring and security services.