**Job Description** BAE Systems, a top ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the government, federal law enforcement officials, and troops deployed around the world. At BAE Systems, we promote a strong, collaborative culture and provide our employees with the tools, skills and training they need to succeed. We are all about trust, camaraderie, and a shared ambition to lead the world in defense technologies and national security services. We offer flexible work environment to support the balance in your life and keep you performing at your best. Be a part of a company that is part of the community; driven to improve our future and protect our freedom. Do you enjoy working in a small team environment with great people? We are looking for a SME level Engineer with proven leadership qualities and cross organization coordination abilities who will: + Perform Security Engineering functions, including mitigation of security vulnerabilities as reported by Nexpose, addressing controls and compliance items, manage continuous monitoring strategies and deliverables, and shepherd systems through assessment and authorization requirements + Support, and troubleshot Windows Server technologies to include file, print, DNS, DFS, and DHCP and possess knowledge of integration of these capabilities within an AWS leveraging Virtual Private Clouds, Availability Zones, Elastic Cloud Compute, Security Groups, and Simple Storage service + Engineer, support and troubleshoot Microsoft Active Directory and Group Policy + Engineer, support and troubleshoot Windows desktop operating systems, including establishing new build and deployment methods for Windows + Support and troubleshoot Windows Exchange Server functionality to include mail routing, account configuration, distribution lists, and email restoration + Perform application delivery and patching capabilities using a combination of Microsoft WSUS and Tanium products + Engineer, support and troubleshoot McAfee ePolicy Orchestrator, including utilization for reporting, devise control, and patching of antivirus engine and DAT files + Engineer, support and troubleshoot PDQ deploy for inventory and application delivery solutions + Act as part of the team responsible for performing rekey, inventory, and general account management of the project's cryptographic account + Support and troubleshoot issues involving desktop applications including the Microsoft Office suite of products (including Outlook), classification management tools + Document all new changes introduced to the system, and keep existing documentation current + Will support other Tier 1 and 2 personnel with general user issues including public key infrastructure, application assistance, network troubleshooting and other user assistance items as needed **Required Education, Experience, & Skills** We are seeking a Systems Engineer with 16 years of relevant experience with a bachelors/master s degree or 18 years of relevant experience without a degree. + Strong verbal communication and documentation skills and attention to detail + Strong troubleshooting skills + Proven Microsoft PowerShell coding experience with large data set harvesting, normalization, and distribution + Nexpose management, scans and reporting + Experience with security engineering solutions, vulnerability mitigations, and accreditation solutions and establishing all program documentation for accreditation deliverables, leveraging the current A&A framework (and XACTA 360) + well versed in all relevant IC, IT, and Security Policies that impact system ownership, use, accreditation, and sustainment + Engineering experience supporting a Windows platform environment with the following core Microsoft Windows platforms, services and tools: + Windows 11 Desktop + Windows 2016/2019/2022 Server + DNS, DFS, and DHCP + User Servers, Print Servers, File Servers + Exchange w/Outlook + Active Directory + Group Policy + Windows Server Update Services (WSUS) + Engineering experience supporting a Windows platform environment leveraging the following tools/ capabilities: + Nexpose/Rapid7 + Certificate Authorities + McAfee EPO + Public Key Infrastructure; certificate issuance, certification authorities, and supporting and upgrading to SHA-2 and SHA-3 certificates + Amazon Web Services, including Virtual Private Clouds, Availability Zones, Elastic Cloud Compute, Security Groups, and Simple Storage Service **Preferred Education, Experience, & Skills** + Windows Assessment and Deployment Kit (ADK) + Windows Pre-Installation Environment (WinPE) + Microsoft Desktop Optimization Pack (MDOP) **Pay Information** Full-Time Salary Range: $146670 - $249330 Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience. Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20 hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics. **Windows Systems Engineer SME** **113358BR** EEO Career Site Equal Opportunity Employer. Minorities . females . veterans . individuals with disabilities . sexual orientation . gender identity . gender expression