Wireless and Edge Infrastructure Cybersecurity Engineer at Booz Allen in Annapolis Junction, MD

Job description

Wireless and Edge Infrastructure Cybersecurity Engineer The Opportunity: Are you driven by relentless curiosity and a passion for securing systems that have never been built before? Does the convergence of wireless networking and AI infrastructure excite you? We are seeking a cybersecurity engineer who can harden, assess, and defend a lab-built system from the server BIOS up through the radio, and who is ready to turn that work into the security baseline for a platform that will be deployed, loaned, and demonstrated across government sites. You will work in a hands-on lab environment where new hardware arrives, gets stood up, gets broken, and gets rebuilt on tight timelines ahead of demos, pilots, and stakeholder reviews. If you enjoy owning security end-to-end on a small, fast-moving team, and want to shape how next-generation wireless and edge AI systems are secured for the mission, we want to hear from you. What You’ll Work On: Own security hardening of the lab platform end-to-end, including GPU-accelerated servers, network switches, radio units, management interfaces, and the Kubernetes and virtualization layers that run on them. Apply and verify defense STIGs and CIS benchmarks on Ubuntu hosts, Kubernetes, hypervisors, and network devices. Track findings to closure and maintain hardening evidence. Design and implement network segmentation and access control across management, control, user, and timing planes, including VLAN isolation, ACLs, and TLS on all management interfaces. Build and operate vulnerability management for the lab, including Nessus or ACAS scanning, patch cadence, and remediation tracking for hosts, containers, and firmware. Perform security assessments of wireless and core network components, including protocol analysis of signaling and user-plane traffic via Wireshark and system logs, and brief findings to engineering and leadership. Prepare and maintain RMF artifacts and supporting documentation for an Authority to Operate (ATO), including system security plans, control implementation statements, and POA&Ms. Secure identity, credential, and secrets management for the platform, including the PKI and certificate lifecycle, SSH key management, service accounts, and privileged access to BMC or IPMI and switch consoles. Implement logging and monitoring, including centralized syslog, host and container telemetry, and alerting for security-relevant events across the stack. Define the shipping and field security posture for a system that is loaned to government sites, including device encryption, baseline integrity verification, and secure teardown and re-image procedures. Write Method of Procedure (MOP), SOP, and security configuration guides concurrently with lab work so the hardened build is reproducible by other teams. Collaborate with network, RF, and software engineers to translate mission and sponsor security requirements into working configurations without blocking delivery timelines. Join us. The world can't wait. You Have: Experience hardening Linux systems to STIG or CIS benchmarks, including evidence collection and remediation Experience securing virtualized and containerized environments, including Kubernetes, Docker, and hypervisors such as Proxmox, VMware, or KVM Experience with network security on Layer 2 or Layer 3 infrastructure, including VLAN segmentation, ACLs, 802.1X, firewalls, and TLS or PKI for management traffic Experience with the DoD Risk Management Framework (RMF), NIST SP 800-53 controls, and preparing artifacts for an ATO Experience with vulnerability scanning and management tools such as Nessus or ACAS, and interpreting scan results in a mixed hardware and software environment Ability to read packet captures such as Wireshark or tcpdump, and system logs to investigate protocol-level and host-level security issues Ability to work hands-on in a fast-paced lab environment with hard delivery deadlines, triage issues independently, and produce clear, accurate technical documentation