Wireless and Edge Infrastructure Cybersecurity Engineer

Booz Allen Hamilton•Annapolis Junction, MD

7d•$86,900 - $198,000•Hybrid

About The Position

Are you driven by relentless curiosity and a passion for securing systems that have never been built before? Does the convergence of wireless networking and AI infrastructure excite you? We are seeking a cybersecurity engineer who can harden, assess, and defend a lab-built system from the server BIOS up through the radio, and who is ready to turn that work into the security baseline for a platform that will be deployed, loaned, and demonstrated across government sites. You will work in a hands-on lab environment where new hardware arrives, gets stood up, gets broken, and gets rebuilt on tight timelines ahead of demos, pilots, and stakeholder reviews. If you enjoy owning security end-to-end on a small, fast-moving team, and want to shape how next-generation wireless and edge AI systems are secured for the mission, we want to hear from you.

Requirements

Experience hardening Linux systems to STIG or CIS benchmarks, including evidence collection and remediation
Experience securing virtualized and containerized environments, including Kubernetes, Docker, and hypervisors such as Proxmox, VMware, or KVM
Experience with network security on Layer 2 or Layer 3 infrastructure, including VLAN segmentation, ACLs, 802.1X, firewalls, and TLS or PKI for management traffic
Experience with the DoD Risk Management Framework (RMF), NIST SP 800-53 controls, and preparing artifacts for an ATO
Experience with vulnerability scanning and management tools such as Nessus or ACAS, and interpreting scan results in a mixed hardware and software environment
Ability to read packet captures such as Wireshark or tcpdump, and system logs to investigate protocol-level and host-level security issues
Ability to work hands-on in a fast-paced lab environment with hard delivery deadlines, triage issues independently, and produce clear, accurate technical documentation under time pressures
Ability to obtain a Secret clearance
Bachelor's degree in CS, Cybersecurity, Electrical Engineering, or Computer Engineering and 5+ years of experience with cybersecurity engineering, or 9+ years of experience with cybersecurity engineering in lieu of a degree
Ability to obtain a Security+ CE or DoD Baseline Certification within 6 months of start date

Nice To Haves

Experience securing wireless or cellular infrastructure, including radio access networks, packet cores, or private LTE or 5G systems, and with their signaling and user-plane protocols
Experience with open RAN architectures and the security guidance published for them, including interface-level threats across management, control, user, and timing planes
Experience with Zero Trust architectures, NAC platforms such as Aruba ClearPass or Cisco ISE, and SIEM or log analytics platforms such as Splunk or Elastic
Experience securing GPU-accelerated or edge AI platforms, including NVIDIA Container Toolkit, GPU operator, driver and firmware integrity, and model or inference service exposure
Experience with precision timing security, including PTP or GNSS spoofing or jamming risks and mitigation, security automation and Infrastructure-as-Code, including Ansible or scripted STIG compliance in Python or Bash, and SIM or eSIM provisioning security, including Ki or OPc handling and SM-DP+ platforms
Experience supporting DoD research, test, or evaluation programs, including sponsor reporting and demonstrations at government venues
Experience with CBRS or SAS, or federal spectrum coordination
Possession of excellent written and verbal communication skills, to brief both engineers and senior stakeholders
Secret clearance
CISSP, CCSP, GICSP, or Certified Kubernetes Security (CKS) Certification

Responsibilities

Own security hardening of the lab platform end-to-end, including GPU-accelerated servers, network switches, radio units, management interfaces, and the Kubernetes and virtualization layers that run on them.
Apply and verify defense STIGs and CIS benchmarks on Ubuntu hosts, Kubernetes, hypervisors, and network devices.
Track findings to closure and maintain hardening evidence.
Design and implement network segmentation and access control across management, control, user, and timing planes, including VLAN isolation, ACLs, and TLS on all management interfaces.
Build and operate vulnerability management for the lab, including Nessus or ACAS scanning, patch cadence, and remediation tracking for hosts, containers, and firmware.
Perform security assessments of wireless and core network components, including protocol analysis of signaling and user-plane traffic via Wireshark and system logs, and brief findings to engineering and leadership.
Prepare and maintain RMF artifacts and supporting documentation for an Authority to Operate (ATO), including system security plans, control implementation statements, and POA&Ms.
Secure identity, credential, and secrets management for the platform, including the PKI and certificate lifecycle, SSH key management, service accounts, and privileged access to BMC or IPMI and switch consoles.
Implement logging and monitoring, including centralized syslog, host and container telemetry, and alerting for security-relevant events across the stack.
Define the shipping and field security posture for a system that is loaned to government sites, including device encryption, baseline integrity verification, and secure teardown and re-image procedures.
Write Method of Procedure (MOP), SOP, and security configuration guides concurrently with lab work so the hardened build is reproducible by other teams.
Collaborate with network, RF, and software engineers to translate mission and sponsor security requirements into working configurations without blocking delivery timelines.