Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 11 days ago

Systems Engineer

lufco27 open roles

Where
Annapolis Junction, Maryland, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSystems Engineerlufco · Annapolis Junction, Maryland, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on lufco's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.7%1 day
  2. 3.5%3 days
  3. 7.8%7 days
  4. 14.6%14 days
  5. 34.0%30 days
This job: posted 11 days ago

The posting

Overview

Position Title: Systems Engineer

Location: Annapolis Junction, MD

Reports To: Program Manager; Team Lead

Job Type: Full-time

Clearance Requirement: Active TS/SCI with Polygraph

Summary:

As a Systems Engineer you serve as a core technical authority bridging high-level cryptographic mission requirements with secure engineering execution. Working within cryptographic development and production environments, you will design, integrate, test, and sustain modernized IT infrastructure and software platforms dedicated to an exclusive customer mission. You will apply system-of-systems engineering, DevSecOps principles, and Scaled Agile Framework (SAFe) methodologies to transition legacy client-server architectures into modular, microservices-based containerized environments.

Key Responsibilities:

  • Engineer, integrate, and sustain government-owned IT infrastructure and platforms in compliance with Risk Management Framework (RMF) guidelines.
  • Lead system architecture refactoring from legacy client-server systems into modular microservices executing within Kubernetes (TKG/OpenShift) enclaves.
  • Interface system platforms with high-assurance cryptographic equipment, Hardware Security Modules (HSMs), key management devices, Public Key Infrastructure (PKI), and external randomizers.
  • Formulate and manage System Security Plans (SSPs), Data Flow Diagrams, COOP plans, and security controls to maintain continuous Authority to Operate (ATO).
  • Implement DevSecOps CI/CD pipeline automation (GitLab CI, Docker, Kubernetes) with embedded security gates, static analysis, and zero-defect validation protocols.
  • Enforce Infrastructure as Code (IaC) configuration management and automated drift remediation using capabilities such as Ansible and Packer.
  • Participate in SAFe Program Increment (PI) planning, sprint execution, and cross-functional Agile Release Trains (ART).

Qualifications

Education:

  • Bachelors degree in a Technical or related discipline is preferred.
  • 4 years of additional experience may be substituted for a bachelors degree.

Experience:

  • SE1: 5+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.
  • SE2: 10+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.
  • SE3: 15+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.

Certifications:

  • DoD 8570.01-M / DoD 8140 Information Assurance Technical (IAT) Level II or III baseline certification (e.g., Security+ CE, CASP+ CE, or CISSP) preferred
  • Certified Kubernetes Administrator (CKA), SAFe Agilist, or equivalent advanced certifications are strongly preferred

Skills:

  • Cryptographic Systems & High-Assurance Security: Advanced proficiency in cryptographic key lifecycle management, FIPS 140-2/3 standards, PKI, Key Management Infrastructure (KMI) concepts, zeroization workflows, and secure boundary enforcement.
  • DevSecOps & Agile Methodologies: Proven hands-on experience in GitLab CI/CD pipeline automation, containerization (Docker, Podman), container orchestration (Kubernetes, OpenShift, Tanzu), and active participation in SAFe ceremonies.
  • Infrastructure as Code & Security Automation: Experience with VMware vSphere/Horizon platforms, Infrastructure as Code (Ansible, Packer), system hardening (DISA STIGs, CIS Benchmarks), and continuous observability stacks (ELK, Grafana).

Physical Requirements:

  • Standard office environment with occasional requirements to visit client sites, labs, or field environments.

Why Join Us?

  • Impactful Work: Contribute to critical national security initiatives and make a real difference in protecting our nation.
  • Cutting-Edge Technology: Work with the latest advancements in SIGINT and related fields.
  • Career Growth: Opportunities for professional development, training, and advancement within a growing company.
  • Collaborative Environment: Join a team of highly skilled and supportive engineers who are passionate about their work.
  • Comprehensive Benefits: Competitive salary, generous PTO, health/dental/vision insurance, 401K matching, tuition reimbursement.

Compensation and Benefits:

  • Competitive Pay: Salaries depend on labor category, years of experience, education, skills relevant to the position, and type of contract.
  • Benefits: Including Paid Time Off; 401K Contribution and Employer Match Contributions; and Medical, Dental, and Vision Coverage.
  • For the full list of LufCo Benefits, visit our website: https://www.lufburrow.com/careers

Position availability can vary due to dynamic, evolving contract needs. This job posting being active does not guarantee an immediately available position matching its description. This job description is intended to provide a general overview of the responsibilities and qualifications for this position. It is not an exhaustive list and may be subject to change based on the needs of the company.

LufCo provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

LufCo Employees: This position qualifies for up to a Purple Award level referral bonus. For more information, visit the Employee Portal.

#CJ

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against lufco's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on lufco's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    lufco's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.