NIH - Lead Security Systems Engineer

cFocus Software seeks a Lead Security Systems Engineer to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance., * Lead the engineering, implementation, and lifecycle management of enterprise security architectures supporting NIH mission systems.

• Provide technical leadership for security engineering initiatives across multiple operating environments.
• Develop secure architecture roadmaps supporting modernization and enterprise transformation initiatives.
• Review and approve engineering designs to ensure alignment with NIH cybersecurity standards.
• Engineer, implement, and maintain secure enterprise infrastructure supporting Windows, Linux, cloud, and hybrid environments.
• Lead system engineering efforts for enterprise servers, virtualization platforms, storage, identity infrastructure, and supporting technologies.
• Develop secure baseline configurations using federal cybersecurity guidance.
• Design resilient and highly available system architectures.
• Support enterprise configuration management and lifecycle management activities
• Lead implementation of NIH Zero Trust Architecture initiatives.
• Design identity-centric security architectures utilizing least privilege principles.
• Implement continuous authentication and authorization capabilities.
• Support micro-segmentation, software-defined perimeters, and secure access technologies.
• Develop Zero Trust implementation strategies aligned with NIST SP 800-207.
• Engineer enterprise security controls protecting systems, networks, applications, and cloud environments.
• Integrate cybersecurity technologies into existing NIH infrastructure.
• Develop secure engineering standards and technical implementation procedures.
• Conduct architecture reviews and security engineering assessments.
• Support technology refresh and modernization initiatives.
• Design secure cloud architectures supporting Azure, AWS, Microsoft 365, and hybrid environments.
• Implement cloud-native security controls.
• Support secure cloud migration initiatives.
• Engineer identity federation and secure cloud connectivity.
• Integrate cloud monitoring and security services.

• Public Trust Clearance
• B.S. Computer Science, Information Technology, or a related field
• 10+ years of progressively responsible experience in systems engineering, infrastructure engineering, or cybersecurity engineering.
• Experience supporting large federal IT environments.
• Experience implementing Zero Trust Architecture.
• Experience supporting hybrid cloud environments.
• Experience designing secure enterprise infrastructure.
• Experience supporting FISMA and RMF compliance activities.

Invitation for Job Applicants to Self-Identify as a U.S. Veteran

• A “disabled veteran” is one of the following:
• a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
• a person who was discharged or released from active duty because of a service-connected disability.
• A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran’s discharge or release from active duty in the U.S. military, ground, naval, or air service.
• An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
• An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.