Northrop Grumman Space Systems – Launch and Missile Defense Systems has an exciting career opportunity for a Sr Principal Engineer Systems – PKI Engineer (24-494) to join our team of qualified, diverse individuals. This position will be located in Colorado Springs, CO, or Huntsville, AL.

Position Overview:

The Command and Control, Battle Management, and Communications (C2BMC) program integrates the Missile Defense System. It is a vital operational system that enables the U.S. president, secretary of defense, and combatant commanders at strategic, regional, and operational levels to systematically plan ballistic missile defense operations, to see the battle develop collectively, and to dynamically manage designated networked sensors and weapons systems to achieve global and regional mission objectives. C2BMC supports a layered missile defense capability that enables an optimized response to threats of all ranges in all phases of flight. C2BMC is the force multiplier that globally and regionally networks integrate, synchronizing autonomous sensor and weapon systems and operations to optimize performance. C2BMC is integral to all system ground and flight tests, which verify and exercise all current and future missile defense system capabilities.

The selected candidate will support the C2BMC DevSecOps team in designing, developing, testing, implementing, and integrating PKI solutions to focus on code signing and key management operations. The PKI engineer will design and implement a certificate lifecycle management process. The selected candidate will have extensive experience managing and maintaining PKI environments and Active Directory Certificate Services. Work with the architecture, engineering, operations, and support teams to integrate the PKI solution into the program in accordance with NIST 800-57 and CNS 1300 standards.  Applying extensive expertise, solving complex problems that require the regular use of ingenuity and creativity, work performed without appreciable direction, and reviewing for desired results from a relatively long time perspective; erroneous decisions would normally result in failure to achieve major organizational objectives; may function in project leadership roles and represents the organization as prime customer contact on significant technical matters on contracts.  Demonstrated ability to multi-task, be self-initiated, and work independently.  Excellent organizational, research, analytical, and problem-solving skills to evaluate situations, make recommendations, and take effective action—knowledge and technical problem-resolution skills.

Essential Functions:

• Participate in efforts related to designing, planning, implementing, and maintaining digital code signing
• Manage certificate enrollment, renewal, and revocation processes
• Ensure the security and integrity of the PKI environment
• Monitor and troubleshoot PKI and Active Directory Certificate Services, collaborating with other Cyber, IT, and Operational teams to integrate PKI solutions with existing systems
• Stay updated with industry trends and best practices in PKI and Active Directory Certificate Services
• Support processes and implement capabilities to support application code integrity, secure SDLC activities, and key management
• Develop and maintain critical technical and cyber infrastructure and capabilities for certificate management
• Implement security measures to protect against unauthorized access and ensure compliance with industry regulations and internal policies
• Responsible for working independently / solo on large projects and, at other times, will be in a collaborative team environment with other DevSecOps engineers and other program development and deployment teams

Salary band for Colorado Springs: $124,900 - $187,300

Salary band for Huntsville: $131,100 - $196,700

Basic Qualifications:

Please note your updated security clearance and IAT/relevant certifications on your resume, if applicable.

• An active Secret clearance is required to start
• Bachelor’s degree in a STEM Engineering discipline with 8 years experience or Master’s degree in a STEM Engineering discipline with 6 years experience
• DoD 8140 certification at IAM Level III or higher (Security+, GSEC, SCNP, SSCP, CISSP, CISA, GSE, SCNA) is required to start
• Experience with Linux/Unix, Windows, scripting (with programming languages such as:
  • Bash
  • PowerShell or Perl
  • SQL
  • LDAP
  • Web services
• Develop PowerShell scripts for administrative and automation tasks
• Support Security Engineering efforts and Cyber Roadmap development and maturation
• Support ongoing Security Engineering and architecture efforts
• Understanding of X.509 Certificate Management Standards
• Understanding of NIST 800-57 and CNS 1300 PKI Standards
• 5-7 years of experience supporting Microsoft Active Directory Certificate Services and PKI technologies

Preferred Qualifications:

• Current and active TS/SCI is highly desired.

What We Can Offer You:

Northrop Grumman provides a comprehensive benefits package and a work environment that encourages your growth and supports the mutual success of our people and our company. Northrop Grumman benefits give you the flexibility and control to choose the benefits that make the most sense for you and your family. Your benefits will include the following:

• Health Plan
• Savings Plan
• Paid Time Off
• Education Assistance
• Training and Development
• Flexible Work Arrangements

https://benefits.northropgrumman.com/us/en2/BenefitsOverview/Pages/default.aspx

NGSpace

COSpace

NGFeaturedJobs

C2BMC

Additional Northrop Grumman Information: