Systems Engineer(SSS-LFI-AUTHN-01)

Job Description

Seeking a Systems Engineer for a 200+ FTE technical development program supporting the Sponsor’s Entitlement Programs as well as IdAM /ICAM, Authentication, Authorization, Attributes and Digital Policy Management. The Systems Engineer will work with a large team of developers, software engineers and data engineers.

The successful candidate will support continuity of our customer’s mission by helping to modernize and implement industry standards while ensuring secure, reliable, and uninterrupted availability of IT systems.

This position is for a Systems Engineer for the enterprise PKI program, and their associated cloud infrastructures located on a secure network. The Systems Engineer will work with a team of engineers, developers, cybersecurity engineers, system architects, and testers.

Core business hours are typically from 9 AM – 3 PM, five days a week. Hours can be flexible for either early arrivals, and/or late departures. Some after hours or weekend work may be required to accommodate system deployments and upgrades.

While not required, it is highly desirable for the Candidate to have knowledge of Public Key Infrastructure (PKI) and understand key concepts like digital certificates, Certificate Authorities (CAs), Registration Authorities (RAs), key management practices, cryptographic algorithms, certificate revocation procedures, and trust models.

Additionally, the ability to design a robust system to issue, manage, and revoke digital certificates while ensuring the integrity and authenticity of users and entities within a network is desirable. Candidates who do not have all these abilities, but have the ability to learn them, will be considered.

*** Applicants for this position are expected to have significant, hands-on systems engineering experience. ***

Primary Responsibilities

• Performing regular maintenance of cloud infrastructure resources, to include patching, configuration, upgrading as needed
• Ensure designs are compatible with the architecture and security requirements
• Integrate systems and services for firewall and network components
• Working with the team’s security engineer to address, mitigate security findings stemming from system security scans
• Linux OS configuration, patching, and maintenance
• Experience with relational databases such as PostgreSQL and MySQL
• Identify and suggest risk mitigation techniques
• Integrate systems and services
• Strong, hands-on experience with Linux (CLI)
• Experience with scripting and programming languages like BASH and Python
• Experience in working on teams utilizing Agile workflows and processes
• Hands on experience with scripting
• Maintenance and deployment of containerized solutions
• Willingness to explore and learn new technologies

,

Required Skills

Active TS/SCI with Polygraph

• Typically requires a Bachelor of Science (BS) degree and relevant experience as follows: • Senior: 6-10 years of demonstrable experience
• Strong, hands-on experience with Linux (CLI)
• Experience with scripting and programming languages like BASH and Python
• Experience in working on teams utilizing Agile workflows and processes
• Hands-on experience with scripting
• Knowledge and experience in development and deployment of containerized solutions using Kubernetes and EKS

Interested and eager to learn

,

Desired Skills

• Experience with Public Key Infrastructure (PKI) and understand key concepts like digital certificates, Certificate Authorities (CAs), Registration Authorities (RAs), key management practices, cryptographic algorithms, certificate revocation procedures, and trust models
• Experience working with CloudFormation / Puppet / Groovy, or other configuration and automation tools
• Experience with maintaining Jenkins
• Network engineering troubleshooting between Cloud environments and non-Cloud environments
• Experience working with Infrastructure as Code (IaC) solutions such as Ansible / Terraform, or other configuration and automation tools
• Solid understanding of Web Application Firewall (WAF) configuration and management
• Experience with networking (e.g., ports, routing tables, subnets, VPNs, firewalls, routers, etc.) to include design, integration and troubleshooting issues
• Experience in working in a cloud-based environment (AWS)
• Experience with the installation, configuration and other configuration management alerting capabilities

,

About Sabree Software Services

Sabree Software Services, Inc. (S3) is a full-service software firm headquartered in Northern Virginia. We support the federal government and commercial arenas by providing high quality, system/software architecture design, full-lifecycle/full-stack software development services, usability engineering, testing, and project management services.

Our team is comprised of an elite network of engineers, with advanced degrees, who have been providing technical services to our customers and partners in the DC metropolitan area for over 20 years. We are committed to delivering innovative, multidisciplinary solutions in an agile fashion.