> Markdown version of [/jobs/ext/4705806-principal-it-systems-security-engineer](https://www.wearedevelopers.com/jobs/ext/4705806-principal-it-systems-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal IT Systems Security Engineer

- **Company:** BAE Systems
- **Location:** Potomac, MD, United States
- **Experience:** Expert
- **Salary:** $118,095 - $200,762
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Information Systems, System Configuration, Data Recovery, Dynamic Host Configuration Protocol, Linux, Domain Name System (DNS), Hyper-V, Windows Servers, Public Key Infrastructure, Zero Trust Network Access, Security Content Automation Protocol, Virtualization Technology, Backup and Restore, Data Ingestion, Splunk, Plan of Action and Milestones, Vmware
- **Published:** November 13, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=3066161013-2

## About the Role

* A CompTIA Security + or equivalent 8570/8140 approved IAT level 2 certification or ability to obtain within 6 months of being hired
 * Bachelor's Degree (typically within the field of Computer Science, Information Technology, or similar field) and 6 years of relevant work experience
 * Maintaining a thorough understanding of NIST 800-53 controls and determining which controls are applicable, as well as documenting the implementation
 * Must have strong troubleshooting skills and the ability to research and find technical solutions with minimal supervision
 * Effective organizational, time management, and communication skills (written and verbal)
 * Proven experience in maintaining secure networks
 * Previous experience as a systems administrator and/or System Security Engineer

Preferred Education, Experience, & Skills

 * The ability to harden applications and systems in accordance with DISA's Security Technical Implementation Guides (STIGs)
 * The ability to understand and remediate vulnerabilities identified by IVAMs, ACAS, and STIGs
 * Experience in administering Trellix Host Based Security System (HBSS) ePolicy Orchestrator (ePO) and Assured Compliance Assessment Solution (ACAS) systems
 * Have experience with VMWare and Hyper-V virtualization technologies
 * Working knowledge of Linux Operating Systems
 * Strong Knowledge of Active Directory, DNS, DHCP and deploying security policies via group policy
 * Experience with deploying and maintaining Public Key Infrastructure (PKI)
 * Experience with deploying and maintaining zero trust architecture
 * Experience configuring log forwarding, ingestion pipelines, and dashboards within Splunk
 * Ability to identify anomalies, investigate alerts, and support remediation based on Splunk analysis

## Description

BAE Systems is seeking an ON-SITE Principal IT Systems Security Engineer. Join our IT Operations Team and become a member of a highly productive team, where each employee has the opportunity to grow their skills and work on rewarding system and network operations projects. The selected candidate will perform the following functions:

 * Ensure Information Systems (IS) are operated, maintained, and disposed of in accordance with approved security policies and practices
 * Conducting automated and manual system assessments to validate system compliance with DISA Security Technical Information Guidelines (STIGs) and Security Content Automation Protocol (SCAP) tool
 * Develop and administer Windows operating system environments
 * Maintain and configure Active Directory (AD) environments and structures
 * Develop and apply Group Policy Objects (GPOs) to standalone and networked information systems
 * Ensuring system security measures comply with applicable government policies (NIST SP 800-37 (RMF), NIST SP 800-53, NIST SP 800-171, CMMC, and internal standards)
 * Assisting the ISSO/ISSM with the creation and review of System Security Plans (SSPs) for IS accreditation
 * Configure and maintain system backups to ensure data recovery
 * Automate tasks using various scripting technologies
 * Configure systems and networks to utilize Public Key Infrastructure (PKI)
 * Identifying, monitoring, and resolving any IS Plan of Action and Milestones (POA&Ms)
 * Develop and maintain Windows Servers, Workstations, and Linux systems in support of the IS lifecycle
 * Implement and review information system backups according to system policy documentation
 * Maintain a strong endpoint security posture to ensure information system protection
 * Supporting Assessment and Authorization and other security test events or reviews to achieve accreditation milestones