Deep understanding of Windows Active Directory configuration and management.
Expertise implementing system and security logging across platforms.
Experience with secrets management tools like HashiCorp Vault or Ansible Vault.
Strong experience configuring Linux authentication and domain integration.
Ability to design and manage Multi-Factor Authentication (MFA) environments.
Expertise in network segmentation and traffic control tools.
Responsibilities
Design, engineer, and implement advanced data protection solutions beyond traditional encryption.
Provide expert guidance on Identity and Access Management (IAM) principles.
Lead development of Zero Trust data protection strategies, including encryption and data masking.
Enforce identity-centric access controls and least-privilege policies.
Implement encryption for data at rest, in transit, and during processing.
Deploy security monitoring tools to detect threats and vulnerabilities.
Define and enforce data retention and compliance policies.
Benefits
Work in a highly regulated environment focusing on cutting-edge data protection.
Opportunity to lead and shape cybersecurity initiatives.
Engage in a culture that emphasizes innovation with Zero Trust principles.
Access to advanced tools and technology for continual professional growth.
Full Job Description
Job Description:
Job Summary
We are seeking an experienced Senior Systems Engineer - Data Security to support advanced cybersecurity and data protection initiatives in highly regulated environments. This role focuses on designing and enforcing secure data retention, identity, and access control strategies aligned with government regulations and Zero Trust principles. The ideal candidate brings deep technical expertise in identity management, automation, and data protection technologies to safeguard sensitive systems and information.
Job Details
Job Title: Senior Systems Engineer - Data Security
Job Category: Cybersecurity / Systems Engineering
Employment Type: Full-Time, Regular
Responsibilities
Design, engineer, and implement advanced data protection solutions beyond traditional encryption.
Provide expert guidance on Identity and Access Management (IAM) principles and best practices.
Lead development and implementation of Zero Trust data protection strategies, including encryption, tokenization, and data masking.
Design and enforce identity-centric access controls, granular permissions, and least-privilege policies.
Implement and manage encryption for data at rest, in transit, and during processing.
Deploy and manage security monitoring and analytics tools to detect anomalies, threats, and vulnerabilities.
Define and enforce data retention and compliance policies aligned with government regulations.
Support strong authentication methods including MFA, biometric authentication, and smart card solutions.
Automate infrastructure deployment and security operations using Linux scripting, Python, and PowerShell.
Manage and operate Privileged Access Management (PAM) and secrets management solutions.
Qualifications
Required
Active TS/SCI clearance with Polygraph.
Deep understanding of Windows Active Directory, including Domain Services configuration and management.
Expertise implementing system and security logging across Windows, Linux, and network devices.
Experience with secrets management tools such as HashiCorp Vault, Ansible Vault, or equivalent.
Strong experience configuring Linux authentication, domain integration, and least-privilege access controls.
Ability to design and manage Multi-Factor Authentication (MFA) environments for both domain-joined and standalone systems.
Expertise managing network segmentation and traffic controls using tools such as iptables, nftables, Illumio, or similar.
Familiarity with enterprise monitoring and vulnerability scanning tools, including the ability to interpret and remediate findings.
Desired
Systems administration or IT certifications in Linux, Microsoft, or networking disciplines.
Experience with VMware or other virtualization technologies.
Strong communication and presentation skills, with the ability to explain complex technical concepts to diverse audiences.
Working Place:
Chantilly, Virginia, United States
Company :
2026 Feb 26th CyberSecurity - CACI International
About CACI International
CACI International Inc is a multinational professional services and information technology company. It provides services to many branches of the federal government including defense, homeland security, intelligence, and healthcare. CACI has approximately 23,000 employees worldwide. The company's mission is to provide enterprise and mission technology services and solutions that best fit the needs of its customers. CACI has been named a Fortune World's Most Admired Company, a Washington Post Top Workplace, and a Forbes Best Employer for Diversity.
