Sr. Engineer, Cybersecurity Engineering

The Senior Engineer, Cybersecurity Engineering owns the end-to-end delivery of secure command-and-control systems for critical infrastructure environments. Responsibilities span requirements, design, integration, validation, and deployment within a V-Model framework, working across multidisciplinary teams. Success in this role requires both disciplined systems engineering and deep technical expertise.

JOB RESPONSIBILITIES, DUTIES & CORE FUNCTIONS

Requirements

Definition & Analysis

• Translate customer cybersecurity needs into traceable system-level and component-level specifications using the Standard V-Model, while collaborating with Project Engineering Leads.

• Contribute to engineering cost estimates based on project requirements and communicate requirements-related issues and risks clearly to program leadership and customers.

System Design & Architecture

• Design cybersecurity architectures for AIM SCS and COTS-based command-and-control solutions, encompassing network segmentation, access control, encryption, secure communications, and integration of physical security subsystems, with all design decisions traceable to applicable NEI 08-09 and CIS benchmark controls.

• Architect platform environments of 20–30 Windows servers and workstations within an Active Directory domain—defining Group Policy-based security controls, virtualized cluster layouts, storage systems, Linux-based security appliances, network switches, and firewalls.

• Produce and maintain design documentation—including virtual and network design plans, network architecture diagrams, configuration specifications, and cybersecurity control mapping matrices—with full traceability to system requirements.

Integration & Build

• Stand up, configure, and deliver environments of 20–30 servers and workstations within an Active Directory domain.

• Perform server and network deployment through the entire product delivery lifecycle to prioritize deliverables, validate product feature sets, and maintain schedule and budget alignment.

• Execute COTS solution integrations by applying system hardening, vulnerability analysis, documentation, and patching.

• Bring systematic, analytical thinking to the diagnosis and resolution of integration issues drawing on creative and innovative problem-solving and documenting resolution paths.

• Maintain configuration management records throughout the build, documenting all decisions, changes, and deviations to provide a complete audit trail.

Verification & Validation

• Verify product feature sets to confirm that functional and cybersecurity capabilities meet acceptance criteria prior to formal test completion.

• Collaborate on development and execution of cybersecurity test procedures mapped through a Requirements Traceability Matrix (RTM), validating component and system-level compliance with all applicable requirements.

• Support Acceptance Testing, conducting vulnerability assessments and security scans, dispositioning all findings.

Onsite Customer System Turn-Up & Support

• Support onsite deployment at customer sites performing physical installation, network commissioning, Active Directory integration, and system configuration in accordance with site-specific cybersecurity commissioning procedures.

• Conduct Site Acceptance Testing (SAT) in coordination with customer security, IT/OT, and operations staff —to diagnose and resolve site-specific integration challenges in real time and communicate technical status, test results, and issue dispositions to applicable stakeholders.

• Train facility personnel on system operation, cybersecurity maintenance, and configuration management practices. Deliver thorough turnover packages.

• Travel up to 25%.

Lifecycle Support & Continuous Improvement

• Drive continuous improvement by capturing lessons learned after each system delivery and translating findings into updated design standards, integration procedures, and test methodologies; share knowledge across the organization to ensure consistency of engineering processes and solutions.

• Mentor junior engineers and serve as a technical point of contact in direct customer communications.

• Other duties as required.

KNOWLEDGE, EXPERIENCE, & SKILLS

• Required

• Bachelor’s degree in Cybersecurity, Systems Engineering, Computer Science, Electrical Engineering, Information Technology, or a related discipline.

• 5 to 7 years of hands-on experience.

• Strong verbal and written communication skills with the ability to produce formal engineering documentation and present technical content effectively to a range of audiences.

• Knowledge of engineering methodologies.

• U.S. citizenship or permanent resident status required.; Ability to obtain site access credentials at nuclear power plants and government facilities.

• Preferred

• Experience in project-based work with requirements driven deliverables.

• Networking protocols and small to mid-sized network design.

• Virtualized clusters.

• Direct experience delivering systems in nuclear power, defense, or other NRC/DOE/DOD-regulated environments, including familiarity with nuclear communications systems, terminology, and NRC 10 CFR 73.54 compliance processes.

• CISSP or equivalent certification; GICSP, Security+, or CASP+ .

• Familiarity with NIST SP 800-82, NIST SP 800-53, and IEC 62443 standards for industrial and critical infrastructure cybersecurity.

PHYSICAL REQUIREMENTS/WORK ENVIRONMENT

Physical Requirements

• Required to sit or stand, bend, type and reach while performing daily functions.

• Daily work with office equipment and materials.

Work Environment

• The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• While performing the duties of this job, the employee is sitting at a desk or standing to perform other tasks.

*This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.