Senior Configuration Management Engineer

Onsite in Herndon, VAOur client seeks a Senior Configuration Management Engineer to lead and mature CM practices for a globally distributed mission system spanning enterprise infrastructure, cloud services, and networks. The role will define baselines, govern change control, and enforce traceability across CI/CD, VMware/vSphere, AWS, and network configurations. The engineer will drive auditability and deployment repeatability while coordinating with security for compliant, hardened baselines. Due to federal security clearance requirements, applicant must be a United States Citizen with an active Secret clearance. This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.

Serve as the CM technical lead responsible for strategy, governance, and execution across infrastructure, application, and network domains. Define and maintain configuration baselines for hardware, software, firmware, cloud resources, and documentation across development, test, staging, production, and lab environments. Establish and operate the CM lifecycle, including baseline creation, change requests, implementation, verification, and release documentation. Own CM practices for GitLab-based CI/CD pipelines, ensuring traceability from requirements to deployments. Baseline and control configurations for VMware/vSphere and AWS environments, driving adoption of Infrastructure as Code. Define CM standards and processes for network devices and services, including routing, VPNs, firewalls, and switching. Operate change control workflows, including impact analysis, technical reviews, and post-change verification. Perform periodic configuration audits, identify discrepancies, and drive corrective actions. Maintain controlled updates for documentation, including diagrams, as-built configurations, and version inventories. Coordinate with Security to ensure baselines align with compliance requirements, including hardening, logging, and access control.