Sr. Systems Security Engineer (Onsite - Largo, FL) TS/SCI Clearance required at RTX in US-FL-LARGO-382SS ~ 7887 Bryan Dairy Rd. ~ BLDG 100

Job description

• The Starburst Engineering Department is seeking a Sr. Systems Security Engineer to contribute to the development and deployment of System Security solutions on the Starburst program. This candidate will be integrated into a multi-discipline team environment, with representation from System Engineers, Software Engineers, Cybersecurity, Digital Technology, and Field Services. Primary responsibilities are the implementation and sustainment of requirements for deployed products and services that are in operational and sustainment states. As a Systems Security Engineer, you will make a significant impact to the program’s execution, working with the Project Engineers (Cost Account Managers and Integrated Product Team Leads) and Domain Leads to execute the development and deployment of program products and services.
• This role will be worked onsite in Largo, FL and requires an active and transferrable TS/SCI clearance. Relocation assistance is available.

Responsibilities

• Work within the Security Engineering domain and as a part of the larger enterprise engineering effort, you will operate within a custom, air-gapped, Department of Defense IT network on a daily basis to perform advanced support and direct deployment of new capabilities at a sustained rate
• Demonstrate your ability to create and present materials to convey concepts and ideas to a wide range of audiences
• Work primarily onsite in a closed area environment with occasionally opportunity to work offsite
• Demonstrate your ability to create, follow and update to system documentation, schematics and operational guides and procedures
• Demonstrate your ability to interface with other teams to help define, determine and implement cyber risk posture, cyber risk mitigation and information assurance throughout the enterprise IT service portfolio on a sustained level
• Travel up to 10% may be required

Requirements

• Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 5 years prior relevant experience or an Advanced Degree in a related field and minimum 3 years of experience
• Active and transferable U.S. government issued TS/SCI security clearance is required prior to start date
• Experience with enterprise configuration and patch management using automated tools such as Microsoft End-Point Configuration Manager (MECM) or Windows Systems Update Service (WSUS)
• Active DoD 8570 IAT Level II certification e.g. Security+ and/or CISSP, with the ability to maintain
• Systems Administration using Linux and Windows desktop and server operating systems (Windows 11/Server 2022/2025/RHEL)
• Experience with traditional, and current on-prem enterprise IT systems and technologies and its impacts to the security of: Identification, Credential and Access Management (ICAM) for those systems. Secure enterprise messaging Enterprise Logging Ingest, Cyber Situational Awareness and protection, Endpoint Detection and Response
• Proficient knowledge of Enterprise Identity Management applications and design including LDAP (e.g. Active Directory) and PKI
• Experience with DISA Security Technical Implementation Guides (STIGs) and Compliance scans using ACAS or SCAP Compliance Checker (SCC)
• Experience with various computing hardware and software platforms, including servers, workstations, supporting various COTS software applications, and custom software applications
• Experience maintaining Window servers and troubleshooting software applications
• Understanding of traditional, and current on-prem enterprise IT systems and technologies and its impacts to the security of: Identification, Credential and Access Management (ICAM) for those systems. secure enterprise messaging Enterprise Logging Ingest, Cyber Situational Awareness and protection, Endpoint Detection and Response
• Experience with enterprise firewalls, including knowledge of firewall policies/rulesets
• Understanding of basic network engineering fundamentals, including: OSI layers, IP addressing, sub-netting, TCP/IP stack, VLANs, well-known ports and protocols, etc.
• Knowledge and experience leading or contributing to integration efforts involving either Cybersecurity, Risk Management Framework, or Information Assurance
• Knowledge of how to scan hardware and software for compliance and vulnerabilities utilizing industry tools such as Assured Compliance Assessment System (ACAS)
• Experience configuring and troubleshooting File Classification, labeling and associated policy tools (e.g. NextLabs, Boldon James), SIEM tools (e.g. Splunk), network monitoring tools (e.g. SolarWinds)
• Experience working with command-line interfaces and scripting (PowerShell, Bash, etc.)
• Experience with common VMware products (vSphere, vCenter, ESXi) and overall virtualization implementations
• Experience in maintaining and administering storage appliances (e.g. Pure Storage, Segate)
• Knowledge of Zero Trust principles
• Experience with Agile project methodologies, and Jira workflows.
• Experience in maintaining and administering storage appliances (e.g. Pure Storage, Segate)
• Agile Development Techniques such as Scrum or Kanban, using Atlassian Tool Suite (Jira, Confluence, Mattermost)
• Knowledge in DevSecOps, Digital Technology or Information Systems, specifically IT networks and enterprise applications
• Understanding of configuring and troubleshooting anti-virus applications and DLP, such as Trellix
• Sound foundation in Data Management and Configuration Management principles, process, and concepts

Skills

Preferred

• Knowledge of Zero Trust principles

Benefits

• Medical, dental, and vision insurance
• Three weeks of vacation for newly hired employees
• Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
• Tuition reimbursement program
• Student Loan Repayment Program
• Life insurance and disability coverage
• Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
• Birth, adoption, parental leave benefits
• Carrot Health, fertility, and family planning
• Adoption Assistance
• Autism Benefit
• Employee Assistance Plan, including up to 10 free counseling sessions
• Healthy You Incentives, wellness rewards program
• Doctor on Demand, virtual doctor visits
• Bright Horizons, child and elder care services
• Teladoc Medical Experts, second opinion program
• And more!
• The salary range for this role is 86,800 USD - 165,200 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills.
• Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
• Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company’s performance.
• This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
• RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.