Sr. Engineer, Cybersecurity Engineering

Responsibilities

• Translate customer cybersecurity needs into traceable system-level and component-level specifications using the Standard V-Model, while collaborating with Project Engineering Leads.
• Contribute to engineering cost estimates based on project requirements and communicate requirements-related issues and risks clearly to program leadership and customers.
• Design cybersecurity architectures for AIM SCS and COTS-based command-and-control solutions, encompassing network segmentation, access control, encryption, secure communications, and integration of physical security subsystems, with all design decisions traceable to applicable NEI 08-09 and CIS benchmark controls.
• Architect platform environments of 20–30 Windows servers and workstations within an Active Directory domain—defining Group Policy-based security controls, virtualized cluster layouts, storage systems, Linux-based security appliances, network switches, and firewalls.
• Produce and maintain design documentation—including virtual and network design plans, network architecture diagrams, configuration specifications, and cybersecurity control mapping matrices—with full traceability to system requirements.
• Stand up, configure, and deliver environments of 20–30 servers and workstations within an Active Directory domain.
• Perform server and network deployment through the entire product delivery lifecycle to prioritize deliverables, validate product feature sets, and maintain schedule and budget alignment.
• Execute COTS solution integrations by applying system hardening, vulnerability analysis, documentation, and patching.
• Bring systematic, analytical thinking to the diagnosis and resolution of integration issues drawing on creative and innovative problem-solving and documenting resolution paths.
• Maintain configuration management records throughout the build, documenting all decisions, changes, and deviations to provide a complete audit trail.
• Verify product feature sets to confirm that functional and cybersecurity capabilities meet acceptance criteria prior to formal test completion.
• Collaborate on development and execution of cybersecurity test procedures mapped through a Requirements Traceability Matrix (RTM), validating component and system-level compliance with all applicable requirements.
• Support Acceptance Testing, conducting vulnerability assessments and security scans, dispositioning all findings.
• Support onsite deployment at customer sites performing physical installation, network commissioning, Active Directory integration, and system configuration in accordance with site-specific cybersecurity commissioning procedures.
• Conduct Site Acceptance Testing (SAT) in coordination with customer security, IT/OT, and operations staff —diagnose and resolve site-specific integration challenges in real time and communicate technical status, test results, and issue dispositions to applicable stakeholders.
• Train facility personnel on system operation, cybersecurity maintenance, and configuration management practices.
• Deliver thorough turnover packages.
• Travel up to 25%.
• Drive continuous improvement by capturing lessons learned after each system delivery and translating findings into updated design standards, integration procedures, and test methodologies; share knowledge across the organization to ensure consistency of engineering processes and solutions.
• Mentor junior engineers and serve as a technical point of contact in direct customer communications.

Qualifications

• Bachelor’s degree in Cybersecurity, Systems Engineering, Computer Science, Electrical Engineering, Information Technology, or a related discipline.
• 5 to 7 years of hands-on experience.
• Strong verbal and written communication skills with the ability to produce formal engineering documentation and present technical content effectively to a range of audiences.
• Knowledge of engineering methodologies.
• U.S. citizenship or permanent resident status required.
• Ability to obtain site access credentials at nuclear power plants and government facilities.
• Preferred: Experience in project-based work with requirements driven deliverables, networking protocols and small to mid-sized network design, virtualized clusters, direct experience delivering systems in nuclear power, defense, or other NRC/DOE/DOD-regulated environments, including familiarity with nuclear communications systems, terminology, and NRC 10 CFR 73.54 compliance processes, ISSP or equivalent certification; GICSP, Security+, or CASP+, familiarity with NIST SP 800-82, NIST SP 800-53, and IEC 62443 standards for industrial and critical infrastructure cybersecurity.