Senior Information Security Engineer

Saab is seeking a Senior Information Security Engineer to support the delivery of security solutions for customer environments. This onsite role in De Witt, NY centers on implementing and securing Windows-based infrastructure, with a focus on Active Directory, Group Policy, endpoint protection, RBAC, and system hardening through assessments and remediation.

Position Overview

This role supports Windows infrastructure security solution delivery, including the design, implementation, and ongoing management of security configurations. You will work across customer environments to ensure controls are documented, deployed, and aligned with security policies.

Responsibilities

• Design, implement, and manage Group Policy Objects (GPOs) to enforce security configurations and organizational standards within customer environments.
• Configure, administer, and harden Windows Server and Windows workstation systems as part of security solution deployments.
• Implement and maintain Active Directory security configurations, including user and group management, OU structures, and policy enforcement.
• Design and implement role-based access control (RBAC) and least-privilege access models.
• Deploy, configure, and manage endpoint protection and antivirus solutions.
• Apply system hardening practices aligned with industry security frameworks and best practices.
• Perform security assessments of Windows environments and implement remediation actions.
• Assist in creating secure configurations, patch processes, and compliance with security policies.
• Document system configurations, security controls, and deployment procedures for customer environments.
• Provide technical guidance and knowledge transfer to customer stakeholders when appropriate.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field (or equivalent experience).
• 8+ years of experience administering and securing Microsoft Windows environments.
• Strong hands-on experience with Active Directory administration.
• Proven experience creating and managing Group Policy Objects (GPOs).
• Experience implementing role-based access control and identity management practices.
• Hands-on experience deploying or managing endpoint protection / antivirus platforms.
• Solid understanding of Windows security architecture and system hardening techniques.
• Experience performing security assessments and remediation.

Technologies

• Microsoft Windows
• Active Directory
• Group Policy Objects (GPOs) and Group Policy management
• Role-based access control (RBAC)
• Endpoint protection, antivirus
• Microsoft Hyper-V Virtualization
• Splunk
• PDQ
• RSA Authentication Manager
• PowerShell
• Ansible
• SIEM
• NIST
• CIS Benchmarks
• ISO 27001
• JIRA
• CompTIA Security+
• CISSP
• GIAC

Travel

• Travel up to 30% may be required.

Desired Tool Experience

• Experience with Microsoft Hyper-V Virtualization, Splunk, PDQ, and RSA Authentication Manager is highly desirable.

Preferred Qualifications

• Experience with Ansible or PowerShell scripting and automation.
• Familiarity with security monitoring tools and SIEM platforms.
• Knowledge of security frameworks such as NIST, CIS Benchmarks, or ISO 27001.
• Experience supporting enterprise or multi-tenant environments.
• Experience with protecting data at rest.
• Experience with stakeholder management.
• Current DoD clearance preferred.
• Experience with JIRA is preferred.
• Relevant certifications such as CompTIA Security+, CISSP, Microsoft security or identity certifications, and GIAC certifications.

Benefits

• Medical, vision, and dental insurance for employees and dependents
• Generous paid time off, including 8 designated holidays
• 401(k) with employer contributions
• Tuition assistance and student loan assistance
• Wellness and employee assistance resources
• Employee stock purchase opportunities
• Short-term and long-term disability coverage

Location and Salary

• Location: De Witt, NY (onsite)
• Compensation: USD 101,600 - 132,000 per year
• Additional location reference: Syracuse

Citizenship and Security

• Must be a U.S. citizen.
• Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Drug-Free Workplace

• Saab is a federal government contractor and adheres to policies and programs necessary for sustaining drug-free workplaces.
• As a condition of employment, candidates will be required to pass a pre-employment drug screen.