> Markdown version of [/jobs/ext/4668212-principal-it-systems-security-engineer](https://www.wearedevelopers.com/jobs/ext/4668212-principal-it-systems-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal IT Systems Security Engineer

- **Company:** BAE Systems
- **Location:** Rockville, MD, United States
- **Experience:** Expert
- **Salary:** $118,095 - $200,762
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, CompTIA Security+, Information Systems, System Configuration, Data Recovery, Dynamic Host Configuration Protocol, Linux, Domain Name System (DNS), Hyper-V, Information Technology Operations, Windows Servers, Public Key Infrastructure, Zero Trust Network Access, Security Content Automation Protocol, Virtualization Technology, Backup and Restore, Computer Network Operations, Data Ingestion, Information Technology, Splunk, Plan of Action and Milestones, Vmware
- **Published:** November 11, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9305767/principal-it-systems-security-engineer

## About the Role

* A CompTIA Security + or equivalent 8570/8140 approved IAT level 2 certification or ability to obtain within 6 months of being hired
 * Bachelor's Degree (typically within the field of Computer Science, Information Technology, or similar field) and 6 years of relevant work experience
 * Maintaining a thorough understanding of NIST 800-53 controls and determining which controls are applicable, as well as documenting the implementation
 * Must have strong troubleshooting skills and the ability to research and find technical solutions with minimal supervision
 * Effective organizational, time management, and communication skills (written and verbal)
 * Proven experience in maintaining secure networks
 * Previous experience as a systems administrator and/or System Security Engineer

Preferred Education, Experience, & Skills

 * The ability to harden applications and systems in accordance with DISA's Security Technical Implementation Guides (STIGs)
 * The ability to understand and remediate vulnerabilities identified by IVAMs, ACAS, and STIGs
 * Experience in administering Trellix Host Based Security System (HBSS) ePolicy Orchestrator (ePO) and Assured Compliance Assessment Solution (ACAS) systems
 * Have experience with VMWare and Hyper-V virtualization technologies
 * Working knowledge of Linux Operating Systems
 * Strong Knowledge of Active Directory, DNS, DHCP and deploying security policies via group policy
 * Experience with deploying and maintaining Public Key Infrastructure (PKI)
 * Experience with deploying and maintaining zero trust architecture
 * Experience configuring log forwarding, ingestion pipelines, and dashboards within Splunk
 * Ability to identify anomalies, investigate alerts, and support remediation based on Splunk analysis

## Description

BAE Systems is seeking an ON-SITE Principal IT Systems Security Engineer. Join our IT Operations Team and become a member of a highly productive team, where each employee has the opportunity to grow their skills and work on rewarding system and network operations projects. The selected candidate will perform the following functions:

 * Ensure Information Systems (IS) are operated, maintained, and disposed of in accordance with approved security policies and practices
 * Conducting automated and manual system assessments to validate system compliance with DISA Security Technical Information Guidelines (STIGs) and Security Content Automation Protocol (SCAP) tool
 * Develop and administer Windows operating system environments
 * Maintain and configure Active Directory (AD) environments and structures
 * Develop and apply Group Policy Objects (GPOs) to standalone and networked information systems
 * Ensuring system security measures comply with applicable government policies (NIST SP 800-37 (RMF), NIST SP 800-53, NIST SP 800-171, CMMC, and internal standards)
 * Assisting the ISSO/ISSM with the creation and review of System Security Plans (SSPs) for IS accreditation
 * Configure and maintain system backups to ensure data recovery
 * Automate tasks using various scripting technologies
 * Configure systems and networks to utilize Public Key Infrastructure (PKI)
 * Identifying, monitoring, and resolving any IS Plan of Action and Milestones (POA&Ms)
 * Develop and maintain Windows Servers, Workstations, and Linux systems in support of the IS lifecycle
 * Implement and review information system backups according to system policy documentation
 * Maintain a strong endpoint security posture to ensure information system protection
 * Supporting Assessment and Authorization and other security test events or reviews to achieve accreditation milestones