Senior System Engineer

Annapolis Junction, MD
Full Time
3027
Experienced

Belay Technologies has been voted Baltimore Business Journal's (BBJ) Best Places to Work 2019, runner up in 2020, and a finalist in 2021!

 Belay Technologies is seeking a System Engineer to join our intel team. The Zero Trust Identity, Credential, and Access Management (ICAM) System Engineer provides systems engineering, integration, testing, and deployment support for Department of Defense Zero Trust initiatives. The engineer will work with multiple ICAM product teams to integrate externally developed capabilities and support the development of internally developed services into a cohesive ICAM solution that can be deployed across diverse mission environments.

The selected candidate will support the integration, configuration, validation, packaging, and release of ICAM capabilities, including identity services, policy decision services, access control components, and supporting infrastructure. Responsibilities include systems engineering, architecture development, technical assessments, requirements analysis, deployment package development, Kubernetes-based deployment support, software supply chain security activities, and release validation.

This position serves as a technical bridge between ICAM product teams, software developers, cybersecurity engineers, test teams, and system integrators to ensure capabilities are properly integrated, tested, documented, and prepared for enterprise deployment. The engineer will help ensure delivered solutions align with Zero Trust principles, cybersecurity requirements, and operational deployment objectives.

Responsibilities Include:

  • Integrate externally developed ICAM capabilities and internally developed services into a unified Zero Trust ICAM solution.
  • Support development, integration, configuration, and testing of ICAM capabilities including identity services, access management services, policy decision services, and supporting infrastructure components.
  • Participate in requirements analysis, functional decomposition, system design, and architecture development activities.
  • Develop and maintain architecture documentation, design products, deployment guides, release notes, user guides, implementation procedures, SOPs, and technical plans.
  • Support development and maintenance of Kubernetes-based deployment packages and associated configuration artifacts used to deploy ICAM capabilities across multiple environments.
  • Perform system integration, configuration validation, troubleshooting, and technical assessments of ICAM capabilities and supporting technologies.
  • Conduct functional, integration, and operational testing to validate system performance and readiness for release.
  • Support secure software integration and release activities, including artifact validation, vulnerability assessment, container security review, and deployment package integrity verification.
  • Participate in software supply chain security activities supporting secure delivery and release of ICAM capabilities.
  • Research emerging technologies, industry standards, federal policies, and DoD guidance to identify capability improvements and integration opportunities.
  • Support risk assessments, security reviews, and mitigation planning activities associated with ICAM and Zero Trust initiatives.
  • Collaborate with software development, cybersecurity, system administration, platform engineering, and test teams to establish capabilities that satisfy mission and security requirements.
  • Support Agile development activities including sprint planning, backlog refinement, requirements discussions, and release planning.
  • Develop technical recommendations and briefings for government and contractor leadership.
  • Coordinate with system integrators and deployment stakeholders to support successful field implementation of delivered capabilities.

Candidates should have the following qualifications:  

  • TS/SCI with polygraph is required.  
  • Bachelor’s Degree or higher in computer engineering or in a field related to the computer engineering or computer science disciplines
  • 10 years of System Engineering experience.  An additional 4+ years of System Engineering experience may be substituted for the degree for a total of 14 years.   

Candidates are required to have the following skills: 

  • Experience supporting systems engineering activities within federal, Department of Defense, Intelligence Community, or similarly regulated environments.
  • Understanding of Identity, Credential, and Access Management (ICAM) concepts and Zero Trust Architecture principles.
  • Experience supporting system integration, configuration, testing, validation, or deployment activities.
  • Experience developing technical documentation including architecture products, design documents, deployment guides, implementation procedures, SOPs, or engineering plans.
  • Knowledge of authentication, authorization, identity federation, access control, and policy enforcement concepts.
  • Experience supporting requirements analysis, system design, architecture development, or engineering assessments.

Candidates are desired to have the following skills: 

  • Experience supporting Zero Trust implementation initiatives.
  • Experience with OAuth, OpenID Connect (OIDC), SAML, federation services, or Single Sign-On technologies.
  • Experience with Identity Providers (IdP), Policy Administration Points (PAP), Policy Decision Points (PDP), Policy Enforcement Points (PEP), or related ICAM technologies.
  • Familiarity with Public Key Infrastructure (PKI), certificate lifecycle management, and credential management solutions.
  • Experience with Kubernetes, Helm, Docker, containerized applications, or cloud-native deployment architectures.
  • Experience supporting deployment package development and release management activities.
  • Familiarity with AWS, Azure, or other cloud environments supporting government workloads.
  • Experience with REST APIs, JSON, XML, and system-to-system integrations.
  • Experience with software supply chain security practices including vulnerability management, artifact validation, SBOMs, dependency analysis, container security, or release integrity verification.
  • Experience with vulnerability assessment tools, security testing, STIG compliance reviews, or remediation tracking
  • Experience supporting Assessment and Authorization (A&A) activities, SSP development, POA&M management, or NIST 800-53 compliance efforts.
  • Familiarity with Agile development methodologies, Jira, and Confluence.
  • Experience developing architecture diagrams, trust boundary diagrams, implementation roadmaps, or technical briefings.
  • Knowledge of scalability, resiliency, and high-availability deployment architectures.  

Perks and Benefits: 

  • 8 weeks paid leave - 4 weeks of personal leave, 3 Yay! days, take off on your birthday,11 paid holidays and optional leave up to 6 days through Belay's volunteer program 
  • 10% matching in 401(k) contributions vested on day one 
  • $5,000 annual training/tuition 
  • Student Loan Repayment Program 
  • 100% company funded HSA 
  • Rich medical coverage (100% coinsurance) 
  • Dental coverage including orthodontia 
  • Up to $420,000 in life insurance, premiums 100% company funded 
  • Amazon Prime, gym reimbursement, monthly lunches, games and prizes 
  • Pet adoption program, generous referral bonus program, fun events, and more! 


At Belay, we are committed to creating an environment where you can thrive both professionally and personally.  We believe in transparency and fairness in compensation. Several factors influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, education, specific skills and competencies and certifications. Belay offers a competitive total compensation package that includes benefits and perks, a flexible work-life balance, and career development.

Salary Range: $168,000 to $240,000

Belay Technologies is a certified Service-Disabled Veteran Owned Small Business located in Columbia, Maryland (Baltimore/Washington area). Belay Technologies specializes in systems automation and full stack development. Belay Technologies provides leading technology and engineering solutions to the DoD, as well as state-of-the-art commercial products. We hire software engineers, web designers, test engineers, systems engineers, systems administrators, database engineers and other tech services. We are an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.

Key words: Full Clearance, Fort Meade, SDVOSB, Service-disabled veteran owned small business, DoD, full scope

Share

Apply for this position

Required*
We've received your resume. Click here to update it.
Attach resume or Paste resume
Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.
Invitation for Job Applicants to Self-Identify as a U.S. Veteran
  • A “disabled veteran” is one of the following:
    • a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
    • a person who was discharged or released from active duty because of a service-connected disability.
  • A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
  • An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
  • An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.
Veteran status


Voluntary Self-Identification of Disability
Voluntary Self-Identification of Disability Form CC-305
OMB Control Number 1250-0005
Expires 05/31/2026
Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Please check one of the boxes below:

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

You must enter your name and date
Human Check*