Wireless and Edge Infrastructure Cybersecurity Engineer

Booz Allen Hamilton • Annapolis Junction, MD

11h • $86,900 - $198,000 • Hybrid

About The Position

Booz Allen is seeking a cybersecurity engineer to secure a lab-built platform combining wireless networking and AI infrastructure, from server BIOS and network equipment through radio systems and the Kubernetes and virtualization layers. The role owns end-to-end security hardening and assessment in a hands-on lab where hardware is deployed, tested, rebuilt, and prepared for demonstrations, pilots, and stakeholder reviews. The resulting security baseline will support a platform deployed, loaned, and demonstrated at government sites.

The engineer will apply and verify security benchmarks, track vulnerabilities and remediation, design segmentation and access controls, assess wireless and core network components, and prepare Risk Management Framework documentation for an Authority to Operate. The role also establishes identity, credential, secrets, logging, monitoring, shipping, and field-security practices. It produces reproducible procedures and configuration guides while collaborating with network, RF, and software engineers to meet mission and sponsor security requirements and delivery timelines.

This position is hybrid in Annapolis Junction, Maryland. A Secret clearance is required. The projected annual compensation range is $86,900 to $198,000. Booz Allen describes benefits including health, life, disability, financial and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards. The role is full-time; eligible full-time and part-time employees working at least 20 hours per week may participate in benefit programs.

Requirements

• Experience hardening Linux systems to STIG or CIS benchmarks, including evidence collection and remediation.
• Experience securing virtualized and containerized environments, including Kubernetes, Docker, and hypervisors such as Proxmox, VMware, or KVM.
• Experience with Layer 2 or Layer 3 network security, including VLAN segmentation, ACLs, 802.1X, firewalls, and TLS or PKI for management traffic.
• Experience with the DoD Risk Management Framework, NIST SP 800-53 controls, and preparing artifacts for an ATO.
• Experience with vulnerability scanning and management tools such as Nessus or ACAS, and interpreting scan results in mixed hardware and software environments.
• Ability to read packet captures using tools such as Wireshark or tcpdump and system logs to investigate protocol-level and host-level security issues.
• Ability to work hands-on in a fast-paced lab with hard deadlines, triage issues independently, and produce clear, accurate technical documentation under time pressure.
• Secret clearance required.
• Bachelor's degree in Computer Science, Cybersecurity, Electrical Engineering, or Computer Engineering and at least 5 years of cybersecurity engineering experience, or at least 9 years of cybersecurity engineering experience in lieu of a degree.
• Ability to obtain a Security+ CE or DoD Baseline Certification within 6 months of the start date.

Nice To Haves

• Experience securing wireless or cellular infrastructure, including radio access networks, packet cores, private LTE or 5G systems, and signaling and user-plane protocols.
• Experience with open RAN architectures and related security guidance, including interface-level threats across management, control, user, and timing planes.
• Experience with Zero Trust architectures, NAC platforms such as Aruba ClearPass or Cisco ISE, and SIEM or log analytics platforms such as Splunk or Elastic.
• Experience securing GPU-accelerated or edge AI platforms, including NVIDIA Container Toolkit, GPU operator, driver and firmware integrity, and model or inference service exposure.
• Experience with precision timing security, including PTP or GNSS spoofing and jamming risks and mitigations.
• Experience with security automation and Infrastructure-as-Code, including Ansible or scripted STIG compliance in Python or Bash.
• Experience with SIM or eSIM provisioning security, including Ki or OPc handling and SM-DP+ platforms.
• Experience supporting DoD research, test, or evaluation programs, including sponsor reporting and demonstrations at government venues.
• Experience with CBRS or SAS, or federal spectrum coordination.
• Experience working in the DoD.
• Excellent written and verbal communication skills for briefing engineers and senior stakeholders.
• CISSP, CCSP, GICSP, or Certified Kubernetes Security (CKS) certification.

Responsibilities

• Own end-to-end security hardening of the lab platform, including GPU-accelerated servers, network switches, radio units, management interfaces, Kubernetes, and virtualization layers.
• Apply and verify defense STIGs and CIS benchmarks on Ubuntu hosts, Kubernetes, hypervisors, and network devices; track findings to closure and maintain hardening evidence.
• Design and implement network segmentation and access control across management, control, user, and timing planes, including VLAN isolation, ACLs, and TLS on management interfaces.
• Build and operate vulnerability management for the lab, including Nessus or ACAS scanning, patch cadence, and remediation tracking for hosts, containers, and firmware.
• Assess wireless and core network components, analyze signaling and user-plane traffic using Wireshark and system logs, and brief findings to engineering and leadership.
• Prepare and maintain RMF artifacts and supporting documentation for an ATO, including system security plans, control implementation statements, and POA&Ms.
• Secure platform identity, credentials, and secrets, including PKI and certificate lifecycle, SSH keys, service accounts, and privileged access to BMC or IPMI and switch consoles.
• Implement centralized syslog, host and container telemetry, and alerting for security-relevant events across the stack.
• Define shipping and field security posture for systems loaned to government sites, including device encryption, baseline integrity verification, secure teardown, and re-imaging procedures.
• Write MOPs, SOPs, and security configuration guides alongside lab work so other teams can reproduce the hardened build.
• Collaborate with network, RF, and software engineers to translate mission and sponsor security requirements into working configurations without blocking delivery timelines.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level