Staff Engineer, Cybersecurity Platform (R5531)

Job Description:

We are seeking an experienced Staff Cybersecurity Platform Engineer to engage in the design, implementation, and optimization of complex software and network infrastructures. This role requires deep expertise across network engineering, cybersecurity protocols, and server room / hardware infrastructure, with a strong ability to communicate and develop Base Media Solutions.

The ideal candidate will operate in a hands-on manner, serving as a technical expert and a key contributor in decision-making across network and infrastructure domains.

What you'll do:

• Decompose, allocate and implement cyber security requirements into system architecture.
• Enforce network security architecture, ensuring compliance with cybersecurity standards and best practices.
• Develop documentation for installations and configurations required to obtain Authorizations to Operate (ATOs).
• Optimize secure network topologies, including segmentation, firewalls, VPNs, and zero-trust models.
• Collaborate with cybersecurity engineering to implement STIGs and develop Base Media solutions that enable execution of Plans of Actions and Milestones (POAMs) to mitigate cyber risks.
• Collaborate with cybersecurity teams to implement threat detection, mitigation, and incident response strategies.
• Provide technical insight on X-BAT GCS cybersecurity stack to cross-functional teams.
• Ensure system scalability, reliability, and performance through proactive design and monitoring strategies
• Support troubleshooting and resolution of complex network and infrastructure issues.
• Work with Network Engineering teams on implementing Voice Over IP Capabilities.

Required qualifications:

• This position requires the ability to obtain and maintain a DoD government clearance at the Secret level
• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Computer Engineering, or related IT field
• 5+ years of experience in platform engineering, cybersecurity or network engineering roles
• Knowledge of network protocols (TCP/IP, DNS, DHCP, etc.)
• Strong expertise in cybersecurity frameworks and protocols (Zero Trust, NIST SP 800-53 & 800-63B, ISO 27001, firewalls, IDS/IPS, encryption standards)
• Hands-on experience with enterprise networking hardware (routers, switches, firewalls, load balancers)
• Experience with cloud networking (AWS, Azure, or GCP) and hybrid environments
• Experience implementing Voice Over IP solutions.

Preferred qualifications:

• Industry certifications such as CCIE, CCNP, CISSP, or equivalent
• Strong DevSecOps background with hands-on Kubernetes (admission control, OPA/Gatekeeper, workload identity) and Terraform (reusable secure modules, policy-as-code).
• Experience designing architectures for classified networks.
• Experience with software-defined networking (SDN) and network automation
• Familiarity with DevOps and Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible)
• Knowledge of compliance requirements (e.g., FedRAMP, DoD, or other regulated environments)