Wireless and Edge Infrastructure Cybersecurity Engineer

Booz Allen Hamilton•Annapolis Junction, MD

About The Position

Booz Allen is seeking a cybersecurity engineer to harden, assess, and defend a lab-built wireless and edge AI platform, from server BIOS and infrastructure through radio systems. The work is hands-on in a fast-paced lab where hardware is installed, tested, rebuilt, and prepared on tight timelines for demonstrations, pilots, and stakeholder reviews. The engineer will own security end-to-end and help establish a repeatable security baseline for a platform deployed, loaned, and demonstrated at government sites. The role spans GPU-accelerated servers, network switches, radio units, management interfaces, Kubernetes, and virtualization layers. It includes applying and verifying security benchmarks, vulnerability management, wireless and network security assessments, RMF documentation for an ATO, identity and secrets management, logging and monitoring, and field security procedures. The engineer will document reproducible configurations and collaborate with network, RF, and software engineers to implement mission and sponsor requirements while supporting delivery timelines.

Requirements

Experience hardening Linux systems to STIG or CIS benchmarks, including evidence collection and remediation.
Experience securing virtualized and containerized environments, including Kubernetes, Docker, and hypervisors such as Proxmox, VMware, or KVM.
Experience with Layer 2 or Layer 3 network security, including VLAN segmentation, ACLs, 802.1X, firewalls, and TLS or PKI for management traffic.
Experience with the DoD Risk Management Framework, NIST SP 800-53 controls, and preparing artifacts for an ATO.
Experience with vulnerability scanning and management tools such as Nessus or ACAS, including interpreting scan results in mixed hardware and software environments.
Ability to read packet captures using tools such as Wireshark or tcpdump and review system logs to investigate protocol-level and host-level security issues.
Ability to work hands-on in a fast-paced lab with hard deadlines, independently triage issues, and produce clear, accurate technical documentation under time pressure.
Active Secret clearance is required.
Bachelor’s degree in Computer Science, Cybersecurity, Electrical Engineering, or Computer Engineering and 5+ years of cybersecurity engineering experience, or 9+ years of cybersecurity engineering experience in lieu of a degree.
Ability to obtain Security+ CE or a DoD Baseline Certification within six months of the start date.

Nice To Haves

Experience securing wireless or cellular infrastructure, including radio access networks, packet cores, private LTE or 5G systems, and their signaling and user-plane protocols.
Experience with open RAN architectures and related security guidance, including interface-level threats across management, control, user, and timing planes.
Experience with Zero Trust architectures, NAC platforms such as Aruba ClearPass or Cisco ISE, and SIEM or log analytics platforms such as Splunk or Elastic.
Experience securing GPU-accelerated or edge AI platforms, including NVIDIA Container Toolkit, GPU operator, driver and firmware integrity, and model or inference service exposure.
Experience with precision timing security, including PTP or GNSS spoofing or jamming risks and mitigation.
Experience with security automation and Infrastructure-as-Code, including Ansible or scripted STIG compliance in Python or Bash.
Experience with SIM or eSIM provisioning security, including Ki or OPc handling and SM-DP+ platforms.
Experience supporting DoD research, test, or evaluation programs, including sponsor reporting and demonstrations at government venues.
Experience with CBRS or SAS, or federal spectrum coordination.
Experience working in the DoD.
Excellent written and verbal communication skills, including the ability to brief engineers and senior stakeholders.
CISSP, CCSP, GICSP, or Certified Kubernetes Security (CKS) certification.

Responsibilities

Own end-to-end security hardening of GPU-accelerated servers, network switches, radio units, management interfaces, Kubernetes, and virtualization layers.
Apply and verify DoD STIGs and CIS benchmarks on Ubuntu hosts, Kubernetes, hypervisors, and network devices; track findings to closure and maintain hardening evidence.
Design and implement network segmentation and access control across management, control, user, and timing planes, including VLAN isolation, ACLs, and TLS on management interfaces.
Build and operate vulnerability management for the lab, including Nessus or ACAS scanning, patch cadence, and remediation tracking for hosts, containers, and firmware.
Assess wireless and core network components, analyze signaling and user-plane traffic using Wireshark and system logs, and brief findings to engineering and leadership.
Prepare and maintain RMF artifacts for an ATO, including system security plans, control implementation statements, and POA&Ms.
Secure identity, credentials, and secrets, including PKI and certificate lifecycle, SSH keys, service accounts, and privileged access to BMC or IPMI and switch consoles.
Implement centralized syslog, host and container telemetry, and alerting for security-relevant events across the platform.
Define field and shipping security posture for systems loaned to government sites, including device encryption, baseline integrity verification, secure teardown, and re-imaging procedures.
Write MOPs, SOPs, and security configuration guides alongside lab work so other teams can reproduce the hardened build.
Collaborate with network, RF, and software engineers to translate mission and sponsor security requirements into working configurations without blocking delivery timelines.