Principal Cyber Systems Engineer - Network Security Engineer III At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.
Northrop Grumman Space Systems-Launch and Missile Defense Systems offers an exciting opportunity for a Principal Cyber Systems Engineer - Network Security Engineer III to join our team of skilled and diverse professionals. This position, based in Colorado Springs, CO, plays a critical role in supporting the U.S. President, the Secretary of Defense, and combatant commanders at strategic, regional, and operational levels. Relocation assistance is not available for this position, and this role is on-site with no remote options.
The Command and Control, Battle Management, and Communications (C2BMC) program is the core of the Missile Defense System. It is a vital operational system that enables the U.S. president, Secretary of Defense, and combatant commanders at strategic, regional, and operational levels to plan missile defense operations systematically, monitor the battle as it unfolds, and dynamically manage networked sensors and weapons systems to meet global and regional mission objectives. C2BMC supports a layered missile defense capability that provides an optimized response to threats of all ranges throughout all phases of flight. It acts as a force multiplier, networking, integrating, and synchronizing autonomous sensors, weapon systems, and operations worldwide and regionally to optimize performance. C2BMC is a crucial component of all ground and flight tests, which verify and demonstrate the capabilities of current and future missile defense systems.
In this role, the candidate will be responsible for providing technical support for the assessment of compliance of information systems with DoD RMF standards (review, verify, and validate required DoD IA RMF documentations and artifacts using DoDI 8510.01/DoD Risk Management Framework). Candidate must have proven experience in developing Cyber-secure Network device configurations (Firewalls, switches, routers). The candidate will be the primary Network Security Engineer supporting the C2BMC Program.
Essential functions include:
Planning, deploying, integrating, and testing upgrades to the C2BMC network at operational sites
Conducting independent research on various networking and security-related topics and producing reports based on their findings
Ensuring that the team's devices are STIG-compliant and properly hardened, along with executing all necessary Cyber protocols
Being an effective communicator with excellent writing and presentation skills using Microsoft PowerPoint and Visio drawing tools
Designing security configurations and testing procedures
Being familiar with the NIST CVE framework
Having experience with virtualization
Being able to work collaboratively in a team environment with other motivated network and system engineers
Having intermediate knowledge of security design, development, and testing methodologies
Being capable of thoroughly documenting project design and development efforts
Being skilled at collaborating with other departments to explain network security requirements and ensure compliance
Being able to learn the basics of security hardening for a wide range of niche products, software, and applications
Being proficient in summarizing, briefing, and recommending solutions to security issues to leadership
Understanding the basics of VMware and ESXi STIGing/Hardening
Basic qualifications include:
A Bachelor of Science Degree in Computer Science, Cyber Engineering, Network Engineering, Engineering, Mathematics, Physics, or a related field from an accredited university is preferred, along with 5 years of experience; or a Master's degree in a related field with 3 years of relevant work experience; or 9 years of relevant experience may be considered as an alternative to a degree.
Applicants must have a current, active in-scope DoD-issued Secret security clearance at the time of application, which is required to start.
A DoD 8140 certification at IAT Level II or higher (Security+ CE, CASP+ CE, GSEC, SSCP, CND, GICSP, etc.) is required to start.
Ability and willingness to travel up to Schriever Space Force Base to support business needs are required for deployments.
Must understand OSI Model, TCP/IP, VLANs, UDP Multicast.
Must know firewall configuration, such as Juniper, Cisco, and Palo Alto.
Requires knowledge and experience in ACL design and operation.
Must have hands-on experience with multi-vendor switching and routing (Juniper, Cisco).
Experienced in implementing standard DOD security procedures such as STIG compliance and system accreditation efforts.
Preferred qualifications include:
Scripting knowledge in Python, Ansible, and PowerShell is highly desired.
A solid understanding of JUNOS is highly desired.
Prior C2BMC experience is desired.
Northrop Grumman provides a comprehensive benefits package and a work environment that encourages your growth while supporting both employees and the company's success. The benefits offered by Northrop Grumman give you flexibility and control to choose options that best suit your needs and those of your family. Your benefits will include the following:
Health Plan
Savings Plan
Paid Time Off
Education Assistance
Training and Development
Flexible Work Arrangements
Salary Range: $110,300.00 - $165,500.00
The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.