Wireless and Edge Infrastructure Cybersecurity Engineer

Remote Work:
Hybrid

Job Number: R0252679

Location:

Annapolis Junction,MD,US

Wireless and Edge Infrastructure Cybersecurity Engineer

The Opportunity:

Are you driven by relentless curiosity and a passion for securing systems that have never been built before? Does the convergence of wireless networking and AI infrastructure excite you? We are seeking a cybersecurity engineer who can harden, assess, and defend a lab-built system from the server BIOS up through the radio, and who is ready to turn that work into the security baseline for a platform that will be deployed, loaned, and demonstrated across government sites.

You will work in a hands-on lab environment where new hardware arrives, gets stood up, gets broken, and gets rebuilt on tight timelines ahead of demos, pilots, and stakeholder reviews. If you enjoy owning security end-to-end on a small, fast-moving team, and want to shape how next-generation wireless and edge AI systems are secured for the mission, we want to hear from you.

What You’ll Work On:

• Own security hardening of the lab platform end-to-end, including GPU-accelerated servers, network switches, radio units, management interfaces, and the Kubernetes and virtualization layers that run on them.
• Apply and verify defense STIGs and CIS benchmarks on Ubuntu hosts, Kubernetes, hypervisors, and network devices.
• Track findings to closure and maintain hardening evidence.
• Design and implement network segmentation and access control across management, control, user, and timing planes, including VLAN isolation, ACLs, and TLS on all management interfaces.
• Build and operate vulnerability management for the lab, including Nessus or ACAS scanning, patch cadence, and remediation tracking for hosts, containers, and firmware.
• Perform security assessments of wireless and core network components, including protocol analysis of signaling and user-plane traffic via Wireshark and system logs, and brief findings to engineering and leadership.
• Prepare and maintain RMF artifacts and supporting documentation for an Authority to Operate (ATO), including system security plans, control implementation statements, and POA&Ms.
• Secure identity, credential, and secrets management for the platform, including the PKI and certificate lifecycle, SSH key management, service accounts, and privileged access to BMC or IPMI and switch consoles.
• Implement logging and monitoring, including centralized syslog, host and container telemetry, and alerting for security-relevant events across the stack.
• Define the shipping and field security posture for a system that is loaned to government sites, including device encryption, baseline integrity verification, and secure teardown and re-image procedures.
• Write Method of Procedure (MOP), SOP, and security configuration guides concurrently with lab work so the hardened build is reproducible by other teams.
• Collaborate with network, RF, and software engineers to translate mission and sponsor security requirements into working configurations without blocking delivery timelines.

Join us. The world can't wait.

You Have:

• Experience hardening Linux systems to STIG or CIS benchmarks, including evidence collection and remediation
• Experience securing virtualized and containerized environments, including Kubernetes, Docker, and hypervisors such as Proxmox, VMware, or KVM
• Experience with network security on Layer 2 or Layer 3 infrastructure, including VLAN segmentation, ACLs, 802.1X, firewalls, and TLS or PKI for management traffic
• Experience with the DoD Risk Management Framework (RMF), NIST SP 800-53 controls, and preparing artifacts for an ATO
• Experience with vulnerability scanning and management tools such as Nessus or ACAS, and interpreting scan results in a mixed hardware and software…