Cyber Range Engineer

Metova Federal•Annapolis Junction, MD

3d•$135,000 - $150,000•Onsite

About The Position

CESI, a By Light company, is seeking a Cyber Range Engineer for its Range Operations team supporting the Persistent Cyber Training Environment – Operations Group (PCTE-OG). The engineer will design, implement, and maintain advanced cyber training environments, using hands-on Windows and Linux, virtualized infrastructure, and cybersecurity experience to develop, deploy, and troubleshoot complex training scenarios. This is a full-time, on-site position in Annapolis Junction, Maryland, with occasional travel of up to 10%. The position requires U.S. citizenship and a TS/SCI security clearance, with the ability to pass a CI polygraph if requested by the customer. The role supports cybersecurity training, mission rehearsal, and validation events in cyber ranges. Work includes building and configuring virtual machines, networks, accounts, tools, and exercise injects; operating offensive and defensive training content; supporting events and users; maintaining Windows and Linux systems and virtual infrastructure; coordinating with developers, exercise staff, and stakeholders; documenting technical configurations and event outcomes; and improving repeatable processes. The stated annual base salary range is $135,000–$150,000. CESI offers medical, dental, and vision coverage, a wellness program, 401(k) matching, short- and long-term disability coverage, an employee assistance program, life insurance, education and training, and a leave policy that includes 11 federal holidays, PTO, military leave, bereavement leave, and jury duty.

Requirements

Bachelor’s degree in a technical discipline such as information technology, computer science, systems engineering, or software engineering from an accredited college or university, or six years of relevant experience in lieu of the degree.
At least five years of combined experience with Computer Network Operations (CNO), Computer Network Exploitation (CNE), or Computer Network Defense (CND) platforms; cyber training and validation exercises; and work with Cyber Protection Teams (CPTs), including planning, coordination, and execution.
Current DoD 8140/8570 IAT Level II certification.
Relevant networking engineering certification.
Relevant Cloud/VMware certification.
Relevant Red Hat, Linux, or Windows certification.
Working knowledge and hands-on experience with both Windows and Linux operating systems.
Experience working with VMware and supporting systems in virtualized environments.
Ability to troubleshoot network connectivity, performance, and configuration issues involving DNS, routing, and TCP/IP.
Intermediate knowledge of defensive and offensive cyber tools and techniques.
Ability to work independently in a fast-paced environment and collaborate with engineers with varied skills and experience levels.
Effective written and oral communication with multiple levels of leadership across business and technical functions.
Ability to prioritize multiple tasks, projects, and demands.
U.S. citizenship.
TS/SCI security clearance and ability to pass a CI polygraph if requested by the customer.

Nice To Haves

Familiarity with or experience supporting the Joint Event Life Cycle (JELC).
Experience supporting cyber training and validation exercises, including planning, coordination, and execution with Cyber Protection Teams (CPTs).
Experience using SIEMs, intrusion detection systems, or threat intelligence platforms to support cybersecurity operations.
Experience using scripting or automation tools to streamline cybersecurity operations or environment setup.

Responsibilities

Support the planning, build, and execution of cybersecurity training, mission rehearsal, and validation events in cyber range environments.
Build and configure cyber range content, including virtual machines, virtual networks, accounts and roles, tooling, and exercise injects, to meet event objectives and scenario designs.
Implement and operate offensive and defensive training content, including red cell tools, defensive sensors, and supporting applications, under established design guidance.
Provide event support during execution windows, including environment readiness checks, user access support, troubleshooting, and rapid issue resolution.
Configure and maintain Windows and Linux training hosts, including patching, baseline configuration, and restoration of lab state as required.
Provide virtual infrastructure and network support, including VMware, routing and switching constructs, DNS, and TCP/IP, and diagnose connectivity and performance issues across range enclaves.
Coordinate with content developers, exercise staff, and stakeholders to capture requirements, track tasks, and communicate status, risks, and impacts.
Develop and update technical documentation, including build notes, runbooks, diagrams, and after-action inputs, to support repeatable event delivery and knowledge transfer.
Identify recurring issues and recommend and implement process, automation, or standard configuration updates for continuous improvement.
Occasionally travel, up to 10% of the time.

Benefits

Medical coverage
Dental coverage
Vision coverage
Wellness program
401(k) matching
Short-term and long-term disability coverage
Employee assistance program
Life insurance
Education and training
Leave policy including 11 federal holidays, PTO, military leave, bereavement leave, and jury duty