Network Security Engineer

Penn State University•San Diego, CA

1d•$100,136 - $197,604•Onsite

About The Position

Penn State’s Applied Research Laboratory (ARL) is seeking a Network Security Engineer for the DevSecOps Team of the Joint Mission Integration and Experimentation (JMIE) Division within the Information Advantage Office. The position is fully onsite in San Diego, California, with periodic travel to local and remote test sites. JMIE delivers advanced communications capabilities and secure experimentation networks supporting departmental mission partners, including cross-domain data movement, tactical compute environments, and resilient edge processing. The engineer will design and maintain security architectures across multi-domain and cloud-connected environments, establish cybersecurity and network administration processes, and work with infrastructure, systems, and cloud teams to securely design, verify, deploy, and monitor networked environments. The role includes preparing Risk Management Framework (RMF) and Body of Evidence documentation, conducting security assessments across multiple classification domains, and implementing and validating security controls. The position also supports lifecycle security work and may include mentoring team members. For higher-level roles, the engineer will work closely with ISSOs and ISSMs to refine RMF materials and may independently develop RMF Authorization and Assessment packages and artifacts needed to obtain an Authority to Operate. The role may be filled at the Senior Professional or Advanced Professional level. ARL is an authorized DoD SkillBridge partner and welcomes transitioning service members to apply.

Requirements

Demonstrated experience developing RMF documentation and guiding systems through accreditation across multiple environments.
Proven ability to design and scale secure network architectures across multi-domain systems.
Strong background in cybersecurity, including vulnerability management, scanning, compliance evaluation, and control implementation.
Experience interpreting security policy, generating evidence, and documenting test results for NIST 800-53 / JSIG security controls.
Active TS/SCI clearance or eligibility to obtain one.
U.S. citizenship is required.
For the Senior Professional level: Bachelor’s degree and 6 or more years of relevant experience, or an equivalent combination of education and experience.
For the Advanced Professional level: Bachelor’s degree and 3 or more years of relevant experience, or an equivalent combination of education and experience.
Successful completion of required background checks; eligibility to obtain a government security clearance; participation in the ARL drug testing program; and compliance with applicable electronic and physical monitoring requirements.

Nice To Haves

Experience managing configuration control for security-related network hardware, software, and firmware.
Prior work as a System or Network Administrator.
Hands-on experience with Windows and Linux environments, especially in enterprise or tactical networks.
Familiarity with DoD technical and policy documentation.
Experience developing security or RMF training materials.
Proficiency with eMASS, ACAS/Nessus, STIG application, and network hardening.
Certifications such as GRC, CISSP, CISM, CCISO, GIAC, GSLC, or CASP+.

Responsibilities

Design, implement, and maintain network security architectures across multi-domain and cloud-connected environments.
Define and enforce cybersecurity and network administration processes to protect data flows across experimental and operational networks.
Collaborate with infrastructure, systems, and cloud teams using Agile methods to support secure design, verification, deployment, and continuous monitoring.
Develop RMF documentation and Body of Evidence artifacts, including system security plans and concept-of-operations documents for networked and cloud systems.
Apply security engineering principles, including secure design, secure coding practices, static and dynamic analysis, and architectural review, to validate security requirements across network infrastructure.
Conduct network security assessments within MLS systems, supporting vulnerability analysis, threat modeling, and security control validation.
Plan, execute, and report on security assessments across multiple classification domains.
Implement and validate network security controls, including boundary protections, segmentation, cross-domain interfaces, and secure transport mechanisms.
Coordinate and oversee RMF documentation required to accredit networked cloud environments, including Cybersecurity Strategies and Continuous Monitoring Plans.
Support lifecycle security requirements such as patch management, supply chain evaluation, change control, and defect management.
Mentor and support team members when needed.
For higher-level roles, collaborate with ISSOs and ISSMs to refine RMF documentation and review system security plans, risk assessments, accreditation packages, and POA&Ms.
For higher-level roles, independently develop RMF Authorization and Assessment packages and deliver artifacts required to obtain an Authority to Operate.