---
title: Systems Engineer at Luf in Annapolis Junction, MD
description: Luf is hiring for the Systems Engineer role in Annapolis Junction, MD. Pays $190K–$225K
  per year. See the full description and apply.
type: job
url: https://www.foundrole.com/jobs/systems-engineer-at-luf-01a0b3da-30d1-767f-8481-4ad0ba479577
date: 2026-10-30T02:16:02Z
og_description: Join Luf as Systems Engineer in Annapolis Junction, MD. Pays $190K–$225K per year.
  Full-time role. Requires 4+ years of experience.
og_image: https://www.foundrole.com/og/t8xjz3.png
breadcrumbs:
  - label: Home
    url: https://www.foundrole.com/
  - label: Search
    url: https://www.foundrole.com/jobs
---

| | |
|---|---|
| **Company** | luf.co |
| **Location** | Annapolis Junction, MD |
| **Salary** | $190K/yr - $225K/yr |
| **Type** | Full Time |
| **Posted** | Oct 29, 2026 |

## Is this job real?

**Ghost job check:** A- · Low risk. Probably a real opening.

## Visa sponsorship

- **H-1B:** No H-1B sponsorship on record for luf.co.
- **E-Verify:** No E-Verify enrollment on record for luf.co.

## Pay for similar jobs

Most similar jobs pay $170,000 – $211,000 a year (median $188,000).

## Description

**Overview**

**Position Title:** Systems Engineer

**Location:** Annapolis Junction, MD

**Reports To:** Program Manager; Team Lead

**Job Type:** Full-time

**Clearance Requirement:** Active TS/SCI with Polygraph

**Summary:**

As a Systems Engineer you serve as a core technical authority bridging high-level cryptographic mission requirements with secure engineering execution. Working within cryptographic development and production environments, you will design, integrate, test, and sustain modernized IT infrastructure and software platforms dedicated to an exclusive customer mission. You will apply system-of-systems engineering, DevSecOps principles, and Scaled Agile Framework (SAFe) methodologies to transition legacy client-server architectures into modular, microservices-based containerized environments.

**Key Responsibilities:**

- Engineer, integrate, and sustain government-owned IT infrastructure and platforms in compliance with Risk Management Framework (RMF) guidelines.
- Lead system architecture refactoring from legacy client-server systems into modular microservices executing within Kubernetes (TKG/OpenShift) enclaves.
- Interface system platforms with high-assurance cryptographic equipment, Hardware Security Modules (HSMs), key management devices, Public Key Infrastructure (PKI), and external randomizers.
- Formulate and manage System Security Plans (SSPs), Data Flow Diagrams, COOP plans, and security controls to maintain continuous Authority to Operate (ATO).
- Implement DevSecOps CI/CD pipeline automation (GitLab CI, Docker, Kubernetes) with embedded security gates, static analysis, and zero-defect validation protocols.
- Enforce Infrastructure as Code (IaC) configuration management and automated drift remediation using capabilities such as Ansible and Packer.
- Participate in SAFe Program Increment (PI) planning, sprint execution, and cross-functional Agile Release Trains (ART).

**Qualifications**

**Education:** 

- Bachelors degree in a Technical or related discipline is preferred.
- 4 years of additional experience may be substituted for a bachelors degree.

**Experience:**

- SE1: 5+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.
- SE2: 10+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.
- SE3: 15+ years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity.

**Certifications:**  

- DoD 8570.01-M / DoD 8140 Information Assurance Technical (IAT) Level II or III baseline certification (e.g., Security+ CE, CASP+ CE, or CISSP) preferred
- Certified Kubernetes Administrator (CKA), SAFe Agilist, or equivalent advanced certifications are strongly preferred

**Skills:**  

- **Cryptographic Systems & High-Assurance Security:** Advanced proficiency in cryptographic key lifecycle management, FIPS 140-2/3 standards, PKI, Key Management Infrastructure (KMI) concepts, zeroization workflows, and secure boundary enforcement.
- **DevSecOps & Agile Methodologies:** Proven hands-on experience in GitLab CI/CD pipeline automation, containerization (Docker, Podman), container orchestration (Kubernetes, OpenShift, Tanzu), and active participation in SAFe ceremonies.
- **Infrastructure as Code & Security Automation:** Experience with VMware vSphere/Horizon platforms, Infrastructure as Code (Ansible, Packer), system hardening (DISA STIGs, CIS Benchmarks), and continuous observability stacks (ELK, Grafana).

**Physical Requirements:**  

- Standard office environment with occasional requirements to visit client sites, labs, or field environments.

**Why Join Us?**

- **Impactful Work:** Contribute to critical national security initiatives and make a real difference in protecting our nation.
- **Cutting-Edge Technology:** Work with the latest advancements in SIGINT and related fields.
- **Career Growth:** Opportunities for professional development, training, and advancement within a growing company.
- **Collaborative Environment:** Join a team of highly skilled and supportive engineers who are passionate about their work.
- **Comprehensive Benefits:** Competitive salary, generous PTO, health/dental/vision insurance, 401K matching, tuition reimbursement.

**Compensation and Benefits:**

- Competitive Pay: Salaries depend on labor category, years of experience, education, skills relevant to the position, and type of contract.
- Benefits: Including Paid Time Off; 401K Contribution and Employer Match Contributions; and Medical, Dental, and Vision Coverage.
- For the full list of LufCo Benefits, visit our website: <https://www.lufburrow.com/careers> 

*Position availability can vary due to dynamic, evolving contract needs. This job posting being active does not guarantee an immediately available position matching its description. *This job description is intended to provide a general overview of the responsibilities and qualifications for this position. It is not an exhaustive list and may be subject to change based on the needs of the company.**

*LufCo provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.*

*LufCo Employees: This position qualifies for up to a Purple Award level referral bonus. For more information, visit the Employee Portal.*  

*#CJ*
## Skills

- Podman
- DoD 8570 Certification
- ICT Infrastructure
- Scaled Agile Framework (SAFe)
- Infrastructure as Code (IaC)
- Hardening
- Client-Server Architecture
- Grafana
- Systems Engineering
- Container Orchestration
- Planning
- Elastic Stack (Elk)
- Agile Methodology
- Automation
- System Security Plan (Ssp)
- DoD 8140 (Cyberspace Workforce)
- OpenShift
- Docker
- Certified Information Systems Security Professional
- VMware vSphere
- Authority to Operate (Ato)
- Kubernetes
- Lifecycle Management
- CI/CD
- IT Infrastructure
- Configuration Management
- Ansible
- CIS Benchmarks
- Gitlab
- Microservices
- Security Controls
- DISA STIG
- Embedded Security
- Hardware Security Modules (Hsm)
- Containerization
- CI/CD Pipelines
- Information Assurance
- Certified Kubernetes Administrator
- Scrum (Software Development)
- Assertiveness
- Systems Architecture
- Systems of Systems Engineering
- Polygraphy
- Key Management
- Risk Management Framework
- Data Flow Diagrams
- HashiCorp Packer
- FIPS Compliance
- DevSecOps
- Code Refactoring
- Validation Protocols
- Top Secret-Sensitive Compartmented Information (Ts/sci Clearance)
- Public Key Infrastructure
- CompTIA Security+
## Benefits

- Financial Aid/Assistance
- Dental Insurance
- Health Insurance
- Paid Time Off (Pto)
- 401(k) Plans
- Vision Insurance
- Professional Development

## Related

- [Engineering jobs](https://www.foundrole.com/careers/engineering?utm_source=ai_markdown)- [Systems Engineering jobs](https://www.foundrole.com/careers/engineering/systems-engineering?utm_source=ai_markdown)- [Systems Engineer jobs](https://www.foundrole.com/careers/engineering/systems-engineering/systems-engineer?utm_source=ai_markdown)- [Browse all companies](https://www.foundrole.com/companies?utm_source=ai_markdown)

## Related pages

- [Defense and Space](https://www.foundrole.com/sectors/aerospace-and-defense/defense-and-space?utm_source=ai_markdown) — 66040 jobs
- [Maryland](https://www.foundrole.com/locations/us/maryland?utm_source=ai_markdown) — 55771 jobs

## Browse

- [Companies](https://www.foundrole.com/companies?utm_source=ai_markdown)
- [Jobs by country](https://www.foundrole.com/locations?utm_source=ai_markdown)
- [Jobs in the United States by state and city](https://www.foundrole.com/locations/us?utm_source=ai_markdown)
- [H1B sponsors by location](https://www.foundrole.com/h1b-sponsors?utm_source=ai_markdown)
- [H1B salaries](https://www.foundrole.com/h1b-salaries?utm_source=ai_markdown)
- [Sectors and industries](https://www.foundrole.com/sectors?utm_source=ai_markdown)
- [Jobs by career field](https://www.foundrole.com/careers?utm_source=ai_markdown)
- [Latest jobs](https://www.foundrole.com/jobs/latest?utm_source=ai_markdown)