> Markdown version of [/jobs/ext/1723246-nih-lead-security-systems-engineer](https://www.wearedevelopers.com/jobs/ext/1723246-nih-lead-security-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# NIH - Lead Security Systems Engineer

- **Company:** cFocus Software Incorporated
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Amazon Web Services, Systems Engineering, Microsoft Azure, Cloud Computing, Cloud Computing Security, Configuration Management, Linux, Network Segmentation, Zero Trust Network Access, Virtualization Technology, Cloud Platform System, Cloud Monitoring, HybridCloud, Information Technology
- **Published:** July 9, 2026
- **Apply:** http://cfocussoftware.applytojob.com/apply/jobs/details/hS7hFsnkJw

## About the Role

* Public Trust Clearance
 * B.S. Computer Science, Information Technology, or a related field
 * 10+ years of progressively responsible experience in systems engineering, infrastructure engineering, or cybersecurity engineering.
 * Experience supporting large federal IT environments.
 * Experience implementing Zero Trust Architecture.
 * Experience supporting hybrid cloud environments.
 * Experience designing secure enterprise infrastructure.
 * Experience supporting FISMA and RMF compliance activities.

## Description

cFocus Software seeks a Lead Security Systems Engineer to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance., * Lead the engineering, implementation, and lifecycle management of enterprise security architectures supporting NIH mission systems.

 * Provide technical leadership for security engineering initiatives across multiple operating environments.
 * Develop secure architecture roadmaps supporting modernization and enterprise transformation initiatives.
 * Review and approve engineering designs to ensure alignment with NIH cybersecurity standards.
 * Engineer, implement, and maintain secure enterprise infrastructure supporting Windows, Linux, cloud, and hybrid environments.
 * Lead system engineering efforts for enterprise servers, virtualization platforms, storage, identity infrastructure, and supporting technologies.
 * Develop secure baseline configurations using federal cybersecurity guidance.
 * Design resilient and highly available system architectures.
 * Support enterprise configuration management and lifecycle management activities
 * Lead implementation of NIH Zero Trust Architecture initiatives.
 * Design identity-centric security architectures utilizing least privilege principles.
 * Implement continuous authentication and authorization capabilities.
 * Support micro-segmentation, software-defined perimeters, and secure access technologies.
 * Develop Zero Trust implementation strategies aligned with NIST SP 800-207.
 * Engineer enterprise security controls protecting systems, networks, applications, and cloud environments.
 * Integrate cybersecurity technologies into existing NIH infrastructure.
 * Develop secure engineering standards and technical implementation procedures.
 * Conduct architecture reviews and security engineering assessments.
 * Support technology refresh and modernization initiatives.
 * Design secure cloud architectures supporting Azure, AWS, Microsoft 365, and hybrid environments.
 * Implement cloud-native security controls.
 * Support secure cloud migration initiatives.
 * Engineer identity federation and secure cloud connectivity.
 * Integrate cloud monitoring and security services.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)