Sr. Systems Engineer with Security Clearance

Description The Senior Systems Engineer will support a Navy enterprise command-and-control environment in Charleston, SC. This position serves as a senior technical authority responsible for the design, engineering, hardening, and lifecycle management of enterprise Windows environments within secure DoD networks. The role centers on Windows Server ecosystems, identity and access management, system hardening, and compliance enforcement, with responsibility for maintaining highly available, secure, and scalable infrastructure. The engineer will lead system-level vulnerability remediation efforts, RMF compliance activities, and enforcement of DISA STIG baselines across enterprise environments. This is a senior, hands-on engineering role requiring deep expertise in Windows internals, Active Directory design, Group Policy architecture, and enterprise cybersecurity practices. The candidate must independently resolve complex system issues, guide technical decisions, and contribute to architecture and engineering strategies across the environment. This role is 100% onsite. Specific duties include but are not limited to the following:

• Engineer and administer enterprise Windows Server environments (2016/2019/2022) within classified and DoD networks
• Architect, manage, and optimize Active Directory Domain Services (AD DS), including forests, domains, trust relationships, and replication topology
• Design and enforce Group Policy (GPO) strategy and configuration baselines across enterprise systems
• Implement and maintain Windows security hardening in accordance with DISA STIGs and DoD cybersecurity policies
• Serve as the technical lead for vulnerability assessment and remediation, leveraging ACAS scan results and system-level mitigation strategies
• Lead engineering efforts for system compliance, auditing, and continuous monitoring under RMF frameworks
• Develop advanced automation using PowerShell (primary) to support configuration enforcement, auditing, and remediation
• Support and optimize virtualized infrastructure (VMware vSphere/ESXi/vCenter) hosting Windows workloads
• Provide engineering support for Windows-based VDI environments, focusing on system performance, stability, and security
• Implement and manage identity, authentication, and access control mechanisms, including least privilege and privileged access strategies
• Troubleshoot and resolve complex Windows OS, AD, and infrastructure-level issues across lab and production environments
• Participate in architecture reviews, engineering boards, and configuration control processes
• Produce and maintain engineering documentation, including system designs, implementation plans, and compliance artifacts
• Mentor junior engineers and provide technical leadership within a multi-disciplinary team environment Why Work For ISS? At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career. Requirements Clearance Level TS/SCI (desired) OR An active SECRET clearance with a current SSBI/T5 investigation AND Candidates must be a U.S. citizen Certification One of the following:
• CompTIA CySA
• CompTIA Security
• CCNA - Security
• GICSP
• GSEC
• SSCP And
• Operating System Certificate (e.g., Linux , Windows Server, CCNA, etc.). Required Skills
• Seven (7) years of experience in systems engineering and support for IT and C4I systems.
• bachelor’s or master’s degree desired in engineering (e.g., network, electrical, mechanical, systems, etc.). Desired Skills
• Advanced expertise in Active Directory architecture (multi-domain/forest design, replication, disaster recovery strategies)
• Deep understanding of Windows Server internals and enterprise infrastructure design
• Strong PowerShell development skills (modular scripting, automation frameworks, secure coding practices)
• Experience with hybrid identity solutions (Azure AD / Entra ID)
• Proven experience leading STIG implementation and compliance at scale
• Experience supporting classified DoD environments with privileged administrative access
• Familiarity with infrastructure-as-code concepts (desired, not required)
• Demonstrated ability to lead engineering efforts and influence architecture decisions