IT Security Engineer, Space
Chantilly · Costa Mesa, CA (OC-00) · USD 146,000-194,000 · Full-time · Posted Sep 23, 2026
At a glance
- Employment
- Full-time
- Location
- Chantilly · Costa Mesa, CA (OC-00)
- Salary
- USD 146,000-194,000 · Base salary
About the role
- We are seeking an IT Security Engineer to own and maintain classified infrastructure end-to-end, from operating system hardening and compliance scanning to virtualization management and enterprise service delivery.
- This role demands more than operational upkeep, it requires deep familiarity with how hardened security controls are applied, validated, and sustained across Windows, Linux, and virtual platforms.
Responsibilities
- Administer Windows and Linux systems, maintaining approved hardened baselines at all times
- Manage virtual infrastructure (primarily VMware vSphere, and potentially vSAN and Horizon/VDI), including provisioning, patching, and STIG compliance for all virtual components
- Apply and maintain STIGs across Windows, RHEL, and VMware using SCAP, SCC, and manual validation; document all findings and remediation activities
- Configure and maintain enterprise services including Active Directory, DNS, DHCP, WSUS/patch repositories, and repository servers
- Develop and maintain automation scripts and Ansible playbooks to reduce manual effort and enforce configuration consistency
- Monitor system health, performance, and security posture using available tooling; respond to alerts and anomalies proactively
- Support ISSO-led vulnerability scanning and remediation, providing technical implementation for all CAT I/II/III findings within required timelines
- Maintain backup and recovery procedures, ensuring RPO/RTO targets are met across all environments
- Build, document, and transition environments to steady-state operations following ATO, ensuring full knowledge transfer
- Support the IT Engineering Lead and ISSM during security assessments by providing technical demonstrations and collecting compliance evidence
Requirements
- Experience administering and hardening Windows Server and Linux (RHEL) in classified environments
- Hands-on VMware vSphere administration, including provisioning and patching
- Ability to apply and validate STIGs using SCAP/SCC tools
- Experience managing Active Directory, DNS, DHCP, and enterprise patch management
- Proficiency in scripting (PowerShell, Bash, or Python) and Ansible
- Currently possesses and is able to maintain an active U.S. Secret security clearance with Full-Scope Polygraph
Preferred qualifications
- Experience with VMware vSAN and Horizon/VDI environments
- Familiarity with engineering applications such as Siemens NX, Teamcenter, or other CAD/CAM/CAE software
- Experience building and transitioning environments through the ATO process to steady-state operations
- Relevant certifications such as CompTIA Security+, RHCSA, VCP, or equivalent
Benefits
- Highly competitive equity grants included in the majority of full time offers
- Top-tier benefits for full-time employees, supported in health, recovery, and whatever comes next
Skills
- Windows Server
- Linux
- RHEL
- VMware vSphere
- VMware vSAN
- SCAP
- SCC
- Active Directory
- DNS
- DHCP
- PowerShell
- Bash
Show all 14 skills
- Python
- Ansible
