Copy of Sr. Systems Security Engineer

VerSprite is a private cybersecurity consulting firm helping organizations tighten their risk-gaps with evolved security solutions and advanced threat intel tools. The Senior Systems & Security Engineer will be responsible for implementing and sustaining security controls, managing identity and access management solutions, and providing technical guidance to junior engineers in a compliance-driven environment.

Responsibilities:

• Implement and sustain security controls aligned to CMMC Level 1/2, NIST SP 800-171, and CUI/ITAR requirements
• Design and maintain PKI (Public Key Infrastructure) and certificate lifecycle
• Implement and manage Identity & Access Management (IAM/IGA) solutions
• Drive continuous compliance monitoring and maintain ongoing audit readiness
• Support ITGC controls in alignment with established governance frameworks
• Serve as the primary Level 3 escalation resource for complex infrastructure and security challenges
• Mentor and provide technical guidance to junior engineers
• Champion operational continuity and long-term infrastructure stability
• Oversee patch management and vulnerability remediation programs
• Manage Group Policy (GPO) design, implementation, and enforcement
• Develop and maintain secure, standardized golden images
• Apply CIS/NIST hardening baselines across systems and environments
• Support secure lifecycle management from deployment through decommission
• Support Active Directory / Azure AD (Entra ID) architecture, integrations, and governance
• Administer Microsoft Intune for endpoint compliance and configuration management
• Deploy and manage virtual machines and cloud services within Azure, including GCC High
• Design, maintain, and optimize infrastructure across hybrid Azure environments

Requirements:

• 10+ years of experience in systems and/or security engineering roles
• Practical, hands-on knowledge of NIST SP 800-171 and CUI/ITAR compliance requirements
• Working experience within CMMC Level 1 and/or Level 2 environments
• Strong foundation in IAM/Identity Governance and PKI/certificate lifecycle management
• Proficiency with Hybrid AD / Azure AD (Entra ID) environments
• Hands-on Azure experience; GCC High familiarity a strong plus
• Microsoft Intune administration and endpoint compliance management
• Demonstrated experience supporting audit and compliance initiatives
• Solid understanding of system hardening principles and secure configuration management
• Experience in defense, aerospace, or federal contracting sectors
• Prior involvement in CMMC or SOX assessments, including POA&M development, evidence collection, and assessor engagement
• Background supporting managed services environments with recurring, long-term client relationships
• Familiarity with COBIT and broader IT governance frameworks