Wireless and Edge Infrastructure Cybersecurity Engineer

Booz Allen Hamilton•Annapolis Junction, MD

1d•$86,900 - $198,000

About The Position

Booz Allen is seeking a cybersecurity engineer to secure a lab-built platform combining wireless networking and AI infrastructure. The engineer will work hands-on with newly delivered hardware in a fast-paced lab, hardening and assessing systems from server BIOS and infrastructure through radio components. The work will establish a reproducible security baseline for a platform deployed, loaned, and demonstrated at government sites, while supporting demos, pilots, and stakeholder reviews. The role owns security across GPU-accelerated servers, network switches, radio units, management interfaces, Kubernetes, and virtualization. It includes applying and validating security benchmarks, managing vulnerabilities, assessing wireless and core network components, preparing RMF and ATO documentation, and securing identities, credentials, secrets, logging, monitoring, and field deployment procedures. The engineer will create operational and security documentation alongside lab work and collaborate with network, RF, and software engineers to implement mission and sponsor requirements. Booz Allen describes its compensation package as including health, life, disability, financial, and retirement benefits; paid leave; professional development; tuition assistance; work-life programs; dependent care; and recognition awards. The projected annualized salary range is $86,900 to $198,000 USD. The role requires a Secret clearance and a bachelor's degree in a related field plus five or more years of cybersecurity engineering experience, or nine or more years of such experience in lieu of a degree. A Security+ CE or DoD baseline certification must be obtained within six months of starting.

Requirements

Experience hardening Linux systems to STIG or CIS benchmarks, including evidence collection and remediation.
Experience securing virtualized and containerized environments, including Kubernetes, Docker, and hypervisors such as Proxmox, VMware, or KVM.
Experience with Layer 2 or Layer 3 network security, including VLAN segmentation, ACLs, 802.1X, firewalls, and TLS or PKI for management traffic.
Experience with the DoD Risk Management Framework, NIST SP 800-53 controls, and preparing ATO artifacts.
Experience with vulnerability scanning and management tools such as Nessus or ACAS, and interpreting results in mixed hardware and software environments.
Ability to read packet captures with tools such as Wireshark or tcpdump and review system logs to investigate protocol- and host-level security issues.
Ability to work hands-on in a fast-paced lab with hard deadlines, independently triage issues, and produce clear, accurate technical documentation under time pressure.
Secret clearance required; selected applicants are subject to a security investigation and must meet eligibility requirements for access to classified information.
Bachelor's degree in computer science, cybersecurity, electrical engineering, or computer engineering and at least five years of cybersecurity engineering experience, or at least nine years of cybersecurity engineering experience in lieu of a degree.
Ability to obtain Security+ CE or a DoD baseline certification within six months of the start date.

Nice To Haves

Experience securing wireless or cellular infrastructure, including radio access networks, packet cores, private LTE or 5G systems, and their signaling and user-plane protocols.
Experience with open RAN architectures and associated security guidance, including interface-level threats across management, control, user, and timing planes.
Experience with Zero Trust architectures, NAC platforms such as Aruba ClearPass or Cisco ISE, and SIEM or log analytics platforms such as Splunk or Elastic.
Experience securing GPU-accelerated or edge AI platforms, including NVIDIA Container Toolkit, GPU operator, driver and firmware integrity, and model or inference service exposure.
Experience with precision timing security, including PTP or GNSS spoofing or jamming risks and mitigation.
Experience with security automation and Infrastructure-as-Code, including Ansible or scripted STIG compliance in Python or Bash.
Experience with SIM or eSIM provisioning security, including Ki or OPc handling and SM-DP+ platforms.
Experience supporting DoD research, test, or evaluation programs, including sponsor reporting and demonstrations at government venues.
Experience with CBRS, SAS, or federal spectrum coordination.
Experience working in the DoD.
Excellent written and verbal communication skills for briefing engineers and senior stakeholders.
CISSP, CCSP, GICSP, or Certified Kubernetes Security (CKS) certification.

Responsibilities

Own end-to-end security hardening of GPU-accelerated servers, network switches, radio units, management interfaces, Kubernetes, and virtualization layers.
Apply and verify defense STIGs and CIS benchmarks on Ubuntu hosts, Kubernetes, hypervisors, and network devices.
Track security findings through closure and maintain hardening evidence.
Design and implement segmentation and access controls across management, control, user, and timing planes, including VLAN isolation, ACLs, and TLS for management interfaces.
Build and operate vulnerability management, including Nessus or ACAS scanning, patch cadence, and remediation tracking for hosts, containers, and firmware.
Assess wireless and core network components using protocol analysis of signaling and user-plane traffic, Wireshark, and system logs; brief findings to engineering and leadership.
Prepare and maintain RMF artifacts and supporting ATO documentation, including system security plans, control implementation statements, and POA&Ms.
Secure identity, credentials, and secrets, including PKI and certificate lifecycle, SSH keys, service accounts, and privileged access to BMC or IPMI and switch consoles.
Implement centralized syslog, host and container telemetry, and alerting for security-relevant events across the platform.
Define field and shipping security practices, including device encryption, baseline integrity verification, secure teardown, and re-imaging procedures.
Write MOPs, SOPs, and security configuration guides so other teams can reproduce the hardened build.
Collaborate with network, RF, and software engineers to turn mission and sponsor security requirements into working configurations while meeting delivery timelines.