Systems Engineer

The Challenge:

Design, test, and deploy architectures, including VMware ESXi infrastructures, Windows domains, and Linux servers. Develop design documentation and conduct technical information system security testing for appropriate security risk management processes using security assessment and technical testing efforts to identify and patch vulnerabilities to the systems being developed. Install, configure, and troubleshoot applications running on Windows and Linux server operating systems.

Work supporting PKI implementations and maintenance. Setup and manage various PKI products, including ISC CertAgent to a configure X.509 Certificate Authority (CA) systems, including Red Hat Linux CA systems. Leverage knowledge of how Windows, Linux, Microsoft IIS, Microsoft SQL, and other networking products use PKI. Secure the products in accordance with DoD guidelines and industry best practices for system build configuration. Apply knowledge of general information assurance and Microsoft and Linux. Demonstrate solutions and create technical documentation and system administration and troubleshooting.

Empower change with us.

You Have:

-3+ years of experience with PKI authentication systems, including set up, support, and internal and external coordination helping ensure apps are PKI-enabled

-Experience with installing and configuring Windows domains and scripting, including PowerShell and with setting up virtual infrastructure using Microsoft Hyper-V and VMware ESXI and configuring Linux servers

-Experience with common PKI-based protocols, including SSL and TLS, HTTP, or LDAP

-Experience with OSs, including Linux or UNIX and Windows

-Experience with hardening Windows servers, Linux servers, and VMware using DoD Security Technical Implementation Guides (STIGs) and with building clusters and servers, as needed
-Experience with installing, upgrading, and maintaining applications residing on servers and in analyzing network traffic with tools, including Wireshark or TCPDump 

-Knowledge of CRLs, OCSP, and their use and how to issue server SSL certifications using a certificate authority

-Ability to comprehend and apply system security engineering principles and communicate with the team quickly, effectively, and proficiently

-Top Secret clearance

-HS diploma or GED

Nice If You Have:

-Experience with the DoD PKI program or other large-scale PKI implementations and with scripting and software development a plus

-Experience with working in classified spaces to implement solutions
-Experience with Data-at-Rest principles, including software full disk encryption, file encryption, platform encryption, and hardware full disk encryption
-Experience with implementing certificate-based encryption on network devices
-Experience with developing security solutions and supporting the ongoing maturation of security capability packages
-Knowledge of security capability packages
-Ability to initiate, manage, execute, and report tasks independently, as identified
-VMWare Certified Professional, Microsoft Certified Solution Developer, or a related Certification preferred

-Possession of excellent verbal and written communication skills

-DoD 8570.1 IAT or IAM Level I Certification, including Security+ or CISSP


Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.

Build Your Career:

When you join Booz Allen, you’ll have the opportunity to connect with other professionals doing similar work across multiple markets. You’ll share best practices and work through challenges as you gain experience and mentoring to develop your career. In addition, you will have access to a wealth of training resources through our Engineering & Science University, an online learning portal where you can access more than 5000 tech courses, certifications and books. Build your technical skills through hands-on training on the latest tools and tech from our in-house experts. Pursuing certifications that directly impact your role? You may be able to take advantage of our tuition assistance, on-site courses, vendor relationships, and a network of experts who can give you helpful tips. We’ll help you develop the career you want as you chart your own course for success.


At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $81,800.00 to $186,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Not ready to apply? Join our talent community and sign up for job alerts.