Principal/Sr Principal Engineer Sys - DevSecOps PKI Engineer (25-418)

CO Salary Range: USD 124,900.00 - 196,700.00 per year

RELOCATION ASSISTANCE: No relocation assistance availableCLEARANCE TYPE: SecretTRAVEL: Yes, 10% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.Northrop Grumman Space Systems-Launch and Missile Defense Systems presents an excellent opportunity for a Principal or Sr Principal Engineer Systems - DevSecOps PKI Engineer (25-418) to join our team of skilled and diverse professionals. This role, based in Colorado Springs, CO, or Huntsville, AL, is crucial in supporting the U.S. President, the Secretary of Defense, and combatant commanders at strategic, regional, and operational levels.
This position does not offer relocation assistance and requires on-site work with no remote options.
Position Overview:
The Command and Control, Battle Management, and Communications (C2BMC) program is a crucial part of the Missile Defense System. It provides a vital operational platform that enables the U.S. president, the secretary of defense, and combatant commanders at strategic, regional, and tactical levels to systematically plan missile defense operations, monitor battle developments, and actively manage networked sensors and weapon systems to accomplish global and regional mission objectives. C2BMC offers a layered missile defense capability, delivering an optimized response to threats across all ranges and flight phases. It acts as a force multiplier by connecting, integrating, and synchronizing autonomous sensor and weapon systems and operations both worldwide and locally to enhance overall performance. Additionally, C2BMC is an essential component of all ground and flight tests that verify and demonstrate the missile defense system's current and future capabilities.
The selected candidate will assist the C2BMC DevSecOps team in designing, developing, testing, implementing, and integrating PKI solutions focused on code signing and key management operations. The appropriate measure for this level position includes: applying extensive expertise; solving complex problems that require regular use of ingenuity and creativity; performing work without significant direction with results reviewed over a relatively long period; making decisions that could impact the achievement of primary organizational objectives; potentially taking on project leadership roles and representing the organization as the primary customer contact on key technical matters concerning contracts. Demonstrated ability to multitask, work independently, and take initiative. Excellent customer service and interpersonal skills, strong time management, and outstanding organizational, research, analytical, and problem-solving abilities to evaluate situations, make recommendations, and take effective action. Possesses knowledge and skills in technical problem resolution, with strong attention to detail, analytical skills, and excellent communication skills, both written and verbal.
Essential Functions:

Will establish and execute a certificate lifecycle management process

Should have extensive experience managing and maintaining PKI environments and Active Directory Certificate Services

Will collaborate with architecture, engineering, operations, and support teams to incorporate the PKI solution into the program in compliance with NIST 800-57 and CNS 1300 standards

Participate in efforts related to designing, planning, implementing, and maintaining digital code signing

Manage certificate enrollment, renewal, and revocation processes

Ensure the security and integrity of the PKI environment

Monitor and troubleshoot PKI and Active Directory Certificate Services-related issues

Collaborate with other Cyber, IT, and Operational teams to integrate PKI solutions with existing systems

Stay informed about industry trends and best practices in PKI and Active Directory Certificate Services

Support processes and implement capabilities to ensure application code integrity, secure SDLC activities, and manage key assets

Develop and maintain critical technical and cyber infrastructure and capabilities for certificate management

Implement security measures to prevent unauthorized access and ensure compliance with industry regulations and internal policies

Create PowerShell scripts for administrative and automation tasks

Support security engineering initiatives and the development and advancement of the Cyber Roadmap

Support continuous Security Engineering and architecture initiatives

Understanding of X.509 Certificate Management Standards, NIST 800-57, and CNS 1300 PKI Standards

Must be an effective communicator with strong written communication skills

Must be responsible for working independently or solo at times on large projects, and at other times collaborate with a team of DevSecOps engineers and other program development and deployment teams

5-7 years of experience supporting Microsoft Active Directory Certificate Services and PKI technologies

This position will be filled as either a Level 3 or Level 4.
Huntsville salary for Level 3: $105,400 - $158,000
Huntsville salary for Level 4: $131,100 - $196,700
Colorado Springs salary for Level 3: $100,300 - $150,500