Cyber Systems Engineer

Job Description

The Cyber Systems Engineer serves as a senior technical contributor within an enterprise cyber operations environment, responsible for system administration, troubleshooting, modernization efforts, secure configuration, documentation, and cross‑team collaboration. This role provides broad systems engineering support across Windows, Linux, virtualization, backup platforms, authentication systems, and cybersecurity tools. Candidates should demonstrate strong learning agility, excellent interpersonal skills, and the ability to take ownership of complex technical challenges through resolution.

Primary responsibilities include administration, maintenance, and upgrades of core infrastructure services; supporting cybersecurity compliance (STIGs, A&A); conducting research and troubleshooting across diverse technologies; documenting processes clearly; collaborating with partner teams; and contributing positively to team culture.

Key Duties & Responsibilities

• Windows Server administration, upgrades, patching, troubleshooting, and general system lifecycle work.
• Linux (RHEL) server administration, including patching, hardening, services management, troubleshooting, and validation.
• RSA Authentication Manager administration, maintenance, upgrades, token lifecycle support, certificate troubleshooting, and integration support.
• Commvault enterprise backup administration, onboarding, policy development, tuning, troubleshooting, version planning, and restore validation.
• Cybersecurity compliance activities including STIG review, STIG checklist creation, remediation support, documentation updates, and A&A package contributions.
• Forcepoint web proxy administration including whitelist/blocklist management, troubleshooting, and customer coordination.
• DNS (RHEL/BIND) blocklist implementation and configuration file management.
• VMware vCenter operations, VM lifecycle support, host/resource management, and best‑practice systems administration.
• Lead or assist troubleshooting and research efforts across Windows, RHEL, virtualization, authentication systems, backup platforms, network integrations, or security tools.
• Produce clear, coherent, technically accurate documentation (SOPs, guides, troubleshooting steps, planning artifacts, ticket notes).
• Use AI‑assisted research effectively (trusted sources, validation of answers, drafting troubleshooting approaches).
• Collaborate across Systems, HBSS, ACAS, Networking, Compliance, and customer organizations.
• Demonstrate strong communication, active listening, humility, and willingness to mentor or knowledge‑share.
• Contribute positively to overall team culture, maintain a good attitude, and consistently follow through on assigned tasks.

This position is located in Norfolk, VA. There is no relocation assistance available for this position. Applicants must be currently residing in or state willingness to relocate self to Norfolk or surrounding areas.

Required Education, Experience, & Skills

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Systems Engineering, or related field (additional years of experience may be substituted for the degree)
• CompTIA Security+ or GIAC GSEC certification.
• At least 5 years of professional experience in systems administration, cyber operations, or enterprise infrastructure support.
• Hands‑on experience administering Windows Server and Linux (RHEL) systems.
• Experience supporting cybersecurity compliance activities (STIGs, A&A).
• Experience with one or more enterprise platforms: VMware vCenter, RSA Authentication Manager, Commvault, Forcepoint, or BIND DNS.
• Experience producing technical documentation and process artifacts for operations teams.
• Demonstrated ability to troubleshoot complex issues across systems, networks, and tools.
• Demonstrated ability to work collaboratively across teams, communicate effectively, and maintain positive interactions.
• Windows Server administration, patching, and troubleshooting.
• Linux (RHEL) administration including patching, services control, and hardening.
• VMware vCenter operations and VM lifecycle tasks.
• RSA Authentication Manager administration.
• Commvault backup administration.
• Forcepoint proxy list management.
• DNS (RHEL/BIND) configuration file management.
• STIG application and interpretation.
• Strong troubleshooting, root‑cause analysis, and technical research capability.
• Ability to evaluate AI‑generated content appropriately for research/troubleshooting use.
• Ability to produce clear, coherent, technically accurate documentation.
• Strong interpersonal communication abilities.
• Effective collaborator; good listener; humble and team‑focused.
• Demonstrated perseverance, ownership, and willingness to push through difficult problems.
• Good attitude, adaptability, and positive contribution to team culture.

Preferred Education, Experience, & Skills

Additional vendor certifications such as:

• ISC2 CISSP, CompTIA SecurityX, or similar advanced security certifications

• Red Hat RHCSA/RHCE

• VMware VCP

• Commvault Professional or Specialist certifications

• RSA Authentication Manager certifications

• Experience supporting enterprise A&A packages or RMF workflows.

• Experience with STIG automation tools or checklist management workflows.

• Experience troubleshooting proxy, DNS, and network‑integrated security tools.

• Broader exposure to ACAS, HBSS/Trellix, or Elastic/log ingestion pipelines (referenced frequently in CPRC WSR content).

• Experience supporting enterprise backup modernization or lifecycle upgrades.

• Experience coordinating with multiple teams (Systems, HBSS, Networking, Compliance, SOC).

• Demonstrated ability to mentor peers, assist teammates with troubleshooting, and support knowledge‑sharing.

• Strong analytical thinking across unfamiliar or new technologies.

• Eager to learn and capable of quickly building competency in new tools or platforms.

Pay Information

Full-Time Salary Range: $107359 - $182510

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.

About BAE Systems Intelligence & Security BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support.

Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn''t a tagline here. It''s what drives us. We''re developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you''re not just building a career. You''re contributing to a mission that truly matters.

This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.