Insider Threat Program Senior System Engineer

Senior System Engineer

The Digital Modernization Sector at Leidos currently has an opening for a Senior System Engineer supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP). This is an exciting opportunity to use your experience to design, develop, and advance the ITP cybersecurity infrastructure baseline. The ITP mission is to identify insider threats to the department by utilizing advanced analytics, monitoring, and data correlation which in turn help address and eliminate potential threat actors from compromising the DHS mission in safeguarding the homeland.

The selected candidate will be responsible for the following:

Creating new design architectures, Engineering and deploying the enhancements to support the ITP mission. Developing and maintaining an architectural roadmap across all ITP infrastructure functions to guide the future of the ITP program. Evaluate all ITP changes to assess for functional, security, and cost risks. Support all engineering functions in helping to design new solutions and strategies for supporting ITP functionality. Support all documentation to effectively capture the configuration baseline. Support performance management to ensure key metrics are tracked and captured reflecting the efficacy and performance of the enterprise. Develop chart decks and artifacts to support the customer in articulating the design and functional baseline of the ITP enterprise to stakeholders.

Basic Qualifications:

• Bachelors degree and (15)+ years of prior relevant experience or Masters with (13) years of prior relevant experience
• Strong Proficiency in operating systems: Windows Server, Linux (RHEL)
• Experience with virtualization platforms: VMware
• Strong understanding of networking protocols (TCP/IP, DNS, DHCP, VPN, VLANs)
• Familiarity with cloud platforms: AWS, Azure, GCP
• Scripting and automation: PowerShell, Bash, Python, Terraform
• Monitoring and logging tools: Splunk, Nagios, Prometheus, ELK Stack
• Configuration management: Ansible, Puppet, Chef, JIRA
• Backup and disaster recovery systems
• Identity and access management (IAM), Active Directory, LDAP
• Working knowledge of defense-in-depth principles, network/HW/SW security architecture, network topology, IT device integrity, and common security elements
• Knowledge of NIST, STIGS, FISMA, or FedRAMP standards
• Experience implementing STIGs and hardening systems
• Familiarity with endpoint protection, SIEM integration, and vulnerability management
• Understanding of zero-trust architecture and secure system design
• Ability to obtain DHS EOD SCI

Preferred Qualifications:

• Master's degree from an accredited college or university in IT Management, Engineering, or related field
• Proven experience (10+ years) in IT service delivery management
• Experience with User Activity Monitoring products and platforms
• Experience with Everfox High Speed Guard Platform
• Experience with Cisco Networking Concepts
• Experience with On Premise Systems Infrastructure
• Experience with Oracle, Microsoft SQL Server, or PostgreSQL DBMS platforms