Senior Principal System Engineer

General Dynamics

Confirmed live 2 days ago High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Fort Meade, MD
Salary: $133,450–$180,550 / yr
Posted: 11 days ago
Freshness: Confirmed live 2 days ago
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $186k

This role $157k

$121k most similar roles pay here $254k

This role pays less than 74% of similar roles. Most pay $156,600–$216,300 — the shaded band above. At the midpoint, this role pays about $157k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1123 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 984 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Senior Principal System Engineer

Role Posting Log in to save

The System Engineer Sr Principal joins a team focused on supporting mission-critical environments through robust cyber and vulnerability management. This role involves managing the end-to-end lifecycle of patching, implementing DISA STIGs and CIS benchmarks, and hardening virtual machines, network devices, and containerized workloads. The engineer will design and optimize remediation strategies to improve security posture across enterprise systems while ensuring compliance with RMF, NIST SP 800-53, and other regulatory requirements. Key technologies include Microsoft Azure Cloud services, Docker, Kubernetes/OpenShift, and various networking hardware like Cisco or Juniper devices. Candidates must be proficient in vulnerability scanning tools such as Tenable, Qualys, Rapid7, or ACAS, alongside automation and scripting using Ansible, PowerShell, Python, and Bash to manage infrastructure security and ensure the integrity of secure systems within a high-stakes environment.

Skills

Vulnerability Management Microsoft Azure Docker Kubernetes OpenShift Tenable Qualys Rapid7 ACAS Python PowerShell Bash Ansible Active Directory LDAP PKI RHEL Ubuntu Windows Server Cisco Juniper NIST SP 800-53 RMF DISA STIG TCP/IP

What you'll do

Lead the design and optimization of vulnerability management and patching strategies for virtualized, networked, and containerized workloads.
Implement DoD/DISA STIGs and CIS benchmarks across operating systems, applications, and network platforms.
Manage the full lifecycle of patch management including assessment, testing, deployment, and verification.
Harden and maintain cloud-native virtual machines and network devices like routers, switches, and firewalls.
Deploy and maintain secure container platforms such as Docker and Kubernetes with a focus on image scanning.
Utilize vulnerability scanning tools like Tenable, Qualys, or ACAS to identify and remediate security findings.
Perform incident response and root cause analysis for system misconfigurations and security issues.
Ensure all technical solutions comply with RMF, NIST SP 800-53, and other federal regulatory requirements.

What we're looking for

Must be a United States citizen.
Must possess an active DoD Secret clearance or higher.
Must have 8+ years of relevant systems engineering experience in secure or mission-critical environments.
Must comply with DoD 8570/8140 requirements, such as Security+, CISSP, or equivalent certifications.
Must have experience managing vulnerability remediation and patching for virtual machines, network devices, and container platforms.
Must have experience implementing DISA STIGs, CIS benchmarks, and other security baselines across various operating systems and networks.
Must possess expertise in Microsoft Azure Cloud services and infrastructure hardening.
US Citizenship.

Save