IT Security Engineer, Space

About the Role

We are seeking an IT Security Engineer to own and maintain classified infrastructure end-to-end, from operating system hardening and compliance scanning to virtualization management and enterprise service delivery. This role requires deep familiarity with how hardened security controls are applied, validated, and sustained across Windows, Linux, and virtual platforms. You'll work closely with security and engineering teams to ensure environments remain compliant, resilient, and mission-ready.

Key Responsibilities

• Administer Windows and Linux systems, maintaining approved hardened baselines.
• Manage virtual infrastructure (primarily VMware vSphere, and potentially vSAN and Horizon/VDI), including provisioning, patching, and STIG compliance for all virtual components.
• Apply and maintain STIGs across Windows, RHEL, and VMware using SCAP, SCC, and manual validation; document all findings and remediation activities.
• Configure and maintain enterprise services including Active Directory, DNS, DHCP, WSUS/patch repositories, and repository servers.
• Develop and maintain automation scripts and Ansible playbooks to reduce manual effort and enforce configuration consistency.
• Monitor system health, performance, and security posture using available tooling; respond to alerts and anomalies proactively.
• Support ISSO-led vulnerability scanning and remediation, providing technical implementation for all CAT I/II/III findings within required timelines.
• Maintain backup and recovery procedures, ensuring RPO/RTO targets are met across all environments.
• Build, document, and transition environments to steady-state operations following ATO, ensuring full knowledge transfer.
• Support the IT Engineering Lead and ISSM during security assessments by providing technical demonstrations and collecting compliance evidence.

Requirements & Tech Stack

• Experience administering and hardening Windows Server and Linux (RHEL) in classified environments.
• Hands-on VMware vSphere administration, including provisioning and patching.
• Ability to apply and validate STIGs using SCAP/SCC tools.
• Experience managing Active Directory, DNS, DHCP, and enterprise patch management.
• Proficiency in scripting (PowerShell, Bash, or Python) and Ansible.
• Currently possesses and is able to maintain an active U.S. Secret security clearance with Full-Scope Polygraph.

Qualifications (Preferred)

• Experience with VMware vSAN and Horizon/VDI environments.
• Familiarity with engineering applications such as Siemens NX, Teamcenter, or other CAD/CAM/CAE software.
• Experience building and transitioning environments through the ATO process to steady-state operations.
• Relevant certifications such as CompTIA Security+, RHCSA, VCP, or equivalent.