Secure Enclave System Engineering Lead

About this role

Type of Requisition: Regular

Clearance Level Must Currently Possess: Top Secret/SCI

Clearance Level Must Be Able to Obtain: Top Secret/SCI

Public Trust/Other Required: None

Job Family: IT Infrastructure and Operations

Job Qualifications: Skills: Continuous Monitoring, Cybersecurity, People Management, Systems Design, Systems Engineering Certifications: None Experience: 15 + years of related experience US Citizenship Required: Yes

Job Description: SYSTEMS ENGINEER SME

Advance how our customers operate while you advance your career. Join GDIT as a Systems Engineer SME and build an impactful career in enterprise IT, collaborating with people who are driven and resourceful like you.

MEANINGFUL WORK AND PERSONAL IMPACT As a Systems Engineer SME, the work you’ll do at GDIT will directly support the mission of our customer. You will play a key role in architecting, securing, and sustaining a classified workstation enclave that enables a compliant, secure, and highly available environment.

• Lead the architecture, engineering, and operations & maintenance (O&M) of the classified workstation enclave, including software/hardware license management and day-to-day team operations

• Collaborate with Customer and Government stakeholders, security teams, and engineering staff to plan, design, implement, and sustain secure workstation solutions

• Drive continuous improvement in security posture, system performance, and team efficiency by managing activities, milestones, risks, and deliverables, and recommending enhancements to architectures and processes

• Apply deep expertise in RMF, NIST 800-53, Continuous Monitoring (ConMon), ISSO/ISSM practices, and secure workstation engineering to ensure compliant implementation

• Lead the day-to-day team operations of the classified workstation environment

• Manage and report on team activities, milestones, risks, and deliverables

• Provide technical and security expertise for enclave build, configuration, and O&M

• Review current system and process architectures and recommend improvements

• Prepare and deliver test plans, technical briefings, and product recommendations

• Maintain the Continuous Monitoring (ConMon) program with RMF support, including all ISSM/ISSO artifacts

• Coordinate with the Customer on shared and inherited security controls and required documentation

• Ensure ongoing maintenance and accuracy of the System Security Plan (SSP) and all appendices

• Oversee engineering procedures, artifacts, and playbooks for core security controls, including:

• Change Management: Documented, followed, and auditable

• Vulnerability Management: Full lifecycle documentation, including monthly POA&M updates

• Security Monitoring & Incident Response: Alert triage, escalation, and reporting aligned with the IR Plan

• Support Customer-led ConMon validation activities

• Lead annual security attestation preparation and execution

WHAT YOU’LL NEED TO SUCCEED Bring your technology expertise and drive for innovation to GDIT. The Systems Engineer SME must have: • Experience managing engineering activities for cyber-compliant DoW system environments (classified preferred).

• Experience maintaining cybersecurity compliance and RMF/ConMon activities aligned with ISSO/ISSM-responsibilities.

• Hands-on expertise in leading or overseeing technical or engineering teams in secure environments, specifically workstation environments.

• Hands-on expertise in engineering DoW system environments, vulnerability management, change management, incident response, and continuous monitoring.

• Strong knowledge of NIST 800-53, RMF, and shared/inherited security controls.

• Ability to communicate effectively with senior Customer and Government stakeholders.

• Experience developing or maintaining SSPs, ConMon packages, or audit/assessment documentation.

• Experience supporting secure workstation enclaves

• Familiarity with DoW or Federal cybersecurity frameworks.

● Education: Bachelor of Arts/Bachelor of Science ● Experience: 15+ years of related experience ● Certification: Must be DoD 8140 / 8570.01-M compliant (e.g., Security+ or equivalent ● Security clearance level: Active Top Secret clearance ● Role requirements: Location - Onsite with 5-15% travel.

GDIT IS YOUR PLACE At GDIT, the mission is our purpose, and our people are at the center of everything we do. ● Growth: AI-powered career tool that identifies career steps and learning opportunities ● Support: An internal mobility team focused on helping you achieve your career goals ● Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off ● Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.

The likely salary range for this position is $170,000 - $230,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours: 40

Travel Required: 10-25%

T elecommuting Options: Onsite

Work Location: USA VA McLean

Additional Work Locations:

Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short

Similar jobs

• Security Engineering Lead — Cogent-security · Remote
• Security Engineering Lead — Accenturefederalservices · Arlington, VA
• Security Engineer Lead — People-culture-talent · San Francisco, CA
• Embedded Systems Security Engineer — Altentechnologyusa · Foster City, California, United States
• Enterprise Security Engineer — Paveakatroveinformationtechnologies · San Francisco, CA
• Enterprise Security Engineer — Gecko-robotics · Pittsburgh
• Enterprise Security Engineer — Benchling · San Francisco, CA
• Enterprise Security Engineer — Doordashusa · Remote